@jgrusko

Security researcher @Apple

Joined August 2010
  • Tweets2.8K
  • Following219
  • Followers4.1K
💥BOOM!💥 Another privilege escalation blog, this time showcasing how to convert arbitrary file deletions 🗑️ to SYSTEM command prompt🌈 CVE-2023-27470. Learn about TOCTOU, pseudo-symlinks, MSI rollback exploits, and, of course, how to protect yourselves! mandiant.com/resources/blog/…

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
8
198
6
507
88,150
PS5 Release: Kernel Exploit (Webkit – v1.03) compiled for ESP8266 Blog post: wololo.net/2023/08/13/ps5-re… Downloads : github.com/frwololo/PS4_PS5-…

PS5 Release: Kernel Exploit (Webkit - v1.03) compiled for ESP8266 - Wololo.net

I was having a hard time finding the latest and greatest version of the PS5 Kernel exploit files (known as v1.03 on SpecterDev‘s github) compiled for the ESP8266. Apologies if a compiled version...

wololo.net
54
1
205
28,388
Hello.. is this thing still on? It's 2023, so here's a fun new blogpost on how we used Intel's x86 CPU JTAG to dump the infamous "secret bootrom" in Microsoft's original Xbox: blog.ret2.io/2023/08/09/jtag…
Using a CodeTAP JTAG debugger connecting to a CPU interposer to dump the Original Xbox's secret bootrom over JTAG.

ALT Using a CodeTAP JTAG debugger connecting to a CPU interposer to dump the Original Xbox's secret bootrom over JTAG.

12
141
5
416
45,116
Enhancing Chromium’s Memory Safety with Armv9 -- community.arm.com/arm-commun…
12
1
39
9,928
finally... hello, PS5 PSP :)
127
237
50
1,486
354,269
Me, starting to analyze a new piece of software: I basically know how this works already, I just need to learn a few of the finer details Me, a week later: I don't know anything about this software, or computers in general.
6
73
7
491
35,753
A rowhammer-style but different (and worse?) mechanism to induce DRAM bit flips. Get popcorn.
Onur Mutlu@_onurmutlu_
26 Jun 2023
lnkd.in/eRwEvuMA
8
18
3
94
43,498
CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver by @dialluvioso_ and @esanfelix labs.bluefrostsecurity.de/bl…
50
1
127
22,609
I can finally have closure and peace of mind
Blue Frost Security
@bluefrostsec
6 Jun 2023
We've been asked to share the kernel challenge we had at OffensiveCon. You can download it at static.bluefrostsecurity.de/… and give it a try. It was meant to be solved live at the conference, but apparently the noisy environment and german keyboard layout made it too hard :').
2
10
2,094
Driver adventures for a 1999 webcam blog.benjojo.co.uk/post/quic…

Driver adventures for a 1999 webcam

blog.benjojo.co.uk
4
10
3,765
New blog post is up! Dumping the AMLogic A113X/A113D BootROM (and eFUSE/OTP data): haxx.in/posts/dumping-the-am…

Dumping the Amlogic A113X Bootrom

In this post we will exploit a memory corruption issue in AMLogic El3 code that is used by various consumer devices like the Sonos One (2nd generation) and the Lenovo Smart Clock. The goal is to get...

haxx.in
3
36
1
121
27,501
Here are the slides for my keynote, 'Mobile Exploitation, the past, present, and the future' at #Zer0Con2023. Zer0con was a blast as always, thank you @POC_Crew!! 🚀💫 github.com/externalist/prese…
12
138
1
416
91,165
✨Amazing detection and analysis by @_clem1 and Google TAG on 2 different campaigns using 5 different 0-days and numerous n-days. Android, iOS, and Samsung devices were targeted blog.google/threat-analysis-…
Screenshot of the top of the blog post at https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/. The title reads "Spyware vendors use 0-days and n-days against popular platforms"

ALT Screenshot of the top of the blog post at https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/. The title reads "Spyware vendors use 0-days and n-days against popular platforms"

1
30
3
104
35,029
"a software engineer and user of 4chan."
4
5
53
5,158
mast1c0re: Part 3 – Escaping the PS5 emulator reddit.com/r/netsec/comments…

From the netsec community on Reddit: mast1c0re: Part 3 – Escaping the PS5 emulator

Explore this post and more from the netsec community

reddit.com
10
24
7,296
It's time everybody!!! the OffensiveCon23 ticket shop is now open! Get your tickets quickly, as they tend to run out pretty soon. offensivecon.org/register.ht…
4
37
16
83
66,890
Old news for us, but others might find it interesting: willsroot.io/2022/12/entrybl… See: nitter.cf/grsecurity/status/1128… (2019) nitter.cf/grsecurity/status/9547… (2018) Users should not take too seriously the cover stories used to disguise embargoed vulnerability fixes.
grsecurity@grsecurity
20 Jan 2018
Based solely on what you've read from Linus (git.kernel.org/pub/scm/linux…) and publications like LWN, (lwn.net/Articles/738975/ lwn.net/Articles/741878/) do the current KAISER/PTI implementations prevent defeating KASLR via Meltdown on Intel CPUs?
36%Yes
64%No
109 votes • Final results
4
2
20
6,960
Exploiting CVE-2022-42703 - Bringing back the stack attack googleprojectzero.blogspot.c…

Exploiting CVE-2022-42703 - Bringing back the stack attack

Seth Jenkins, Project ZeroThis blog post details an exploit for CVE-2022-42703 (P0 issue 2351 - F...

projectzero.google
2
38
2
101
KmsdBot Botnet Is Down After Operator Sends Typo In Command packetstormsecurity.com/news…

KmsdBot botnet is down after operator sends typo in command

Cashdollar: 'It’s not often we get this kind of story in security'

theregister.com
1
1
5
How the 8086 processor's microcode engine works righto.com/2022/11/how-8086-…
14
29
Load more