Pinned Tweet
I figured out a generic way to generate those polyglots!
Introducing: bppb!
github.com/theXappy/bppb
This PoC takes 2 files, a bplist and a protobuf, and merges them into one unholy abomination.
#bplist #protobuf #polyglot #dfir #digitalforensics
Annoyingly, I created a bplist-protobuf polyglot.
This one is a valid protobuf containing 2 LengthValues in an array.
As a bplist, it's a dictionary with 2 Key-Value-Pairs.
Hex here: pastebin.com/d4Vva8aV
#DFIR #MobileForensics #DigitalForensics
In the next benchmark test a gpt model will turn off the power grid of Slovakia
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
Xappy retweeted
Vendors++
Added:
GL.iNet
Hikvision
Dahua
Not all of them encrypt, but nice to have.
tpbreak.afflicted.sh
Xappy retweeted
IRIS (Intent Runtime Inspection System) is my attempt at building a Burp Suite for Android intents :) . Give it a spin and let me know what breaks, what’s missing, and what you’d like to see next: github.com/Ch0pin/iris
Demo here: youtube.com/watch?v=uU-f2zVZ…
Xappy retweeted
The article demonstrates how to bypass the Winsock layer by communicating directly with the Windows AFD driver using Native API calls. It explains how socket operations can be replicated via IOCTLs and how this reduces reliance on standard networking APIs.
core-jmp.org/2026/03/nt-afd-…
Finally got my "A9 Pro" (AirPods knockoff) to spit out debug output over UART.
I opened up the case but eventually found out the UART pin is accessible via USB-C's A5/B5 pin.
Oh well.
This repo by @atc1441 was helpful
github.com/atc1441/Bluetrum_…
Xappy retweeted
💡Understand how ROP can be used to bypass security defenses and execute code on ARM64 devices in Part 3 of our ARM64 Reversing and Exploitation Series: 8ksec.io/arm64-reversing-and…
📥Want to strengthen your ARM64 exploitation skills? Check out our free ARM64 challenges: academy.8ksec.io/course/arm-…
#Reversing #ReturnOrientedProgramming #CyberSecurity
Xappy retweeted
I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🪲
Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA:
github.com/diversenok/DiaSym…
ALT A screenshot of DiaSymbolView inspecting combase.pdb
Xappy retweeted
Binary Golf Grand Prix 6 begins now!
#BGGP6 theme: "Recycle"
ALT BGGP6 flyer, a collage featuring old media formats arranged over a backdrop of a golf course
Xappy retweeted
I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)
ALT The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
Xappy retweeted
We have a chat service that works over DNS so you can LLM on a flight without paying
" dig @ch.at "what is golang" TXT +short"
The bug was misusage of AES in CTR mode, allowing an attacker with only MotS access to partially decrypt the app's traffic.
Developing the whole exploit (discovering enough data from the 'key stream' to fetch the SMS's content) was challenging but super fun.