@tCryptoman

Reverse engineering, Malware analysis.

 127.0.0.1
Joined August 2010
  • Tweets1.8K
  • Following772
  • Followers157
If you missed a certain #38c3 talk don’t forget recordings are available! streaming.media.ccc.de/38c3/… media.ccc.de/c/38c3
1
26
81
7,066
Really enjoying the explainpaper app, @amanjha__ @functionofjade. Any plans to integrate with an app like Zotero? Why? I’d love to integrate my own annotations with explainpapers clarification of jargon. As well as whole of library queries. Thematically querying material
1
51
Replying to @rossjanderson
@rossjanderson Professor Ross Anderson, FRS, FREng Dear friend and treasured long term campaigner for privacy and security, Professor of Security Engineering at Cambridge University and Edinburgh University, Lovelace Medal winner, has died suddenly at home in Cambridge.
73
291
123
796
488,067
RIP @rossjanderson. You were an inspiration, a mentor, and a giant. You moved our field.
Duncan Campbell@duncan_2qq
29 Mar 2024
Replying to @rossjanderson
@rossjanderson Professor Ross Anderson, FRS, FREng Dear friend and treasured long term campaigner for privacy and security, Professor of Security Engineering at Cambridge University and Edinburgh University, Lovelace Medal winner, has died suddenly at home in Cambridge.
1
1
30
2,996
Here are the slides for my keynote, 'Mobile Exploitation, the past, present, and the future' at #Zer0Con2023. Zer0con was a blast as always, thank you @POC_Crew!! 🚀💫 github.com/externalist/prese…
12
138
1
416
91,184
I'm honored to keynote WOOT'23 (co-located with IEEE S&P) and will be discussing the latest advancements in fuzzing technology!
USENIX WOOT Conference on Offensive Technologies@wootsecurity
5 Apr 2023
📢Thrilled to announce Richard Johnson (@richinseattle) as our first Keynote Speaker! Register to WOOT at lower rate by *April 21* at na.eventscloud.com/ereg/inde… We are looking forward to see you in San Francisco on May 25th! wootconference.org/
4
14
2
123
29,960
Looking to recruit 👩‍🎓 PhD students and 👩‍💻 interns in Software Security. Strong background in one of: * Statistics, data science, * ML (causality, security flaws), * Program analysis, system building, * Vuln. discovery, CTFs. Reach me via mboehme.github.io RT appreciated.
7
85
3
161
Gave Over. cacm.acm.org/magazines/2023/…
50
92
24
403
126,046
Excited to announce my first ever P0 blogpost is now public! It details a new exploit strategy on Linux kernel that Jann and I worked together to invent. Thanks to everyone on the P0 team for giving me the opportunity to achieve this dream! googleprojectzero.blogspot.c…

Exploiting CVE-2022-42703 - Bringing back the stack attack

Seth Jenkins, Project ZeroThis blog post details an exploit for CVE-2022-42703 (P0 issue 2351 - F...

projectzero.google
1
93
3
288
I'm so excited seeing the hard copy of the Kernel Exploit Recipes booklet from Google! I feel so proud that my work is part of it! It will stay in my collection forever. Thank you for making it happen! @sirdarckcat
10
36
6
252
I’m really excited for us to shed light on some really cool work we’ve been doing to harden the XNU allocator! This has been a huge effort by so many people, and I’m very proud of the direction: security.apple.com/blog/towa…

Towards the next generation of XNU memory safety: kalloc_type - Apple Security Research

Improving software memory safety is a key security objective for engineering teams across the industry. Here we begin a journey into the XNU kernel at the core of iOS and explore the intricate work...

security.apple.com
6
94
13
391
Do you sit at a computer for longer than 6 hours a day? You’re destroying your body if so. Here’s the setup you need to protect yourself from posture problems and crippling long-term injuries: 🧵
1,302
30,206
2,656
132,617
The image in this tweet displays its own MD5 hash. You can download and hash it yourself, and it should still match - 1337e2ef42b9bee8de06a4d223a51337 I think this is the first PNG/MD5 hashquine.
badidea 🪐@0xabad1dea
9 Aug 2013
Trick I want to see: a document in a conventional format (such as PDF) which mentions its own MD5 or SHA1 hash in the text and is right
75
1,689
229
7,604
New blog post :) A pretty unique Android vulnerability I found, which allowed me to exploit the kernel by using the TrustZone. This helped me bypass all kernel security mitigations and create a super reliable exploit. tamirzb.com/attacking-androi…

Attacking the Android kernel using the Qualcomm TrustZone

In this post I describe a somewhat unique Android kernel exploit, which utilizes the TrustZone in order to compromise the kernel.

tamirzb.com
12
259
4
732
If you’ve used @letsencrypt to make use of trivially easy free and open certificate authorities, then you owe a huge amount of gratitude to Peter Eckersley who sadly just left us. Thank you Peter and RIP
8
364
16
1,626
Run your shellcode directly from bash: dd of=/proc/$$/mem bs=1 seek=$(($(cut -d" " -f9</proc/$$/syscall))) if=<(base64 -d<<<utz+IUO+aRkSKL+t3uH+McCwqQ8F) conv=notrunc Credits to "unknown"
11
267
9
1,064
Just did the first challenge of @Nosoynadiemas's Fuzzing 101 (found here: github.com/antonio-morales/F…) That's gonna be a big recommend from me. Super easy to follow and helpful intro for a web guy.

GitHub - antonio-morales/Fuzzing101: An step by step fuzzing tutorial. A GitHub Security Lab...

An step by step fuzzing tutorial. A GitHub Security Lab initiative - antonio-morales/Fuzzing101

github.com
5
41
169
My universal UNPATCHABLE ailbreak for MikroTik: 1. Download Cloud Router VM image, boot it in your favourite hypervisor 2. Suspend / save to disk 3. Replace /nova/bin/login with /bin/sh in the saved memory image 4. Restore the running VM from the memory image ur welcome
Margin Research@Margin_Research
10 Jun 2022
🔥🤯😱 New research from @__comedian and @hgarrereyn as debuted at @reconmtl 📶🔦 Pulling MikroTik into the Limelight 👉margin.re/attachments/Pullin…
2
17
1
62
Linux kernel SLUB cache aliasing from the exploitation perspective on modern kernels duasynt.com/blog/linux-kerne…
32
104
Load more