0x9k

reverse&pwn&python&c&二次元萌妹子爱好者

[SunSec @1nf0s3cpt]

🔥Root Cause Analysis Part 2 of Past DeFi Incidents.

We have covered another 101 incidents. We hope this information can help developers avoid making the same mistakes as much as possible.

👉https://t.co/dvv3c1yCik

#Web3 #DeFi

[Mobile Security @mobilesecurity_]

Debugging Android Java Code With JDB
#MobileSecurity #AndroidSecurity [VIDEO] by @lauriewired
https://t.co/hPY2kOP8JL

[SunSec @1nf0s3cpt]

(1/3)
📑OnChain Transaction Debugging
Lesson 1: Tools
https://t.co/EUm79LX2YT

I will collaborate with @xrexinc @SlowMist_Team @GoplusSecurity @numencyber @realScamSniffer @WTFAcademy_ and cybersecurity communities work together to build Web3 Cybersecurity Academy.

#web3sec

[Saar Amar @AmarSaar]

Last year, Apple shared a high-level overview of "Memory safe iBoot implementation". I thought it would be nice to reverse and write about it, hope you will find it interesting :) https://t.co/roMrVSHVU1

[reverseame @reverseame]

CVE-2022-27666: Exploit esp6 modules in Linux kernel https://t.co/y1Gj6t5xHG

[Yalu Jailbreak @Yalujb]

iOS 15 rootless jailbreak achieved - get_root and replace proc_ucred with any_proc_ucred(kern_ucred) (dev - @xina520). #rootless #jailbreak

[joe @SovrnJoe]

@thal0x To everyone that wants to learn more about MEV, here's a good starting place
https://t.co/HJDfAz1rxe

h/t @knowerofmarkets

[samczsun @samczsun]

How did the @wormholecrypto exploit work? I joined forces with @gf_256 and @ret2jazzy to reverse engineer the exploit, and now that it's been patched we can finally share it with you👇

[Howard Oakley, Eclectic Light Co @howardnoakley]

Booting an M1 Mac from hardware to kexts: 3 XNU, the kernel https://t.co/TYp04TirsN

[ZeusBox @Zeusb0x]

CVE-2021-37980. Hey @Google, WTF! Full explanation: https://t.co/8nvyfQiBUo

[ZeusBox @Zeusb0x]

PoC CVE-2021-30563 - Type Confusion in V8. Recent #chromium 0-day exploited in the wild.

https://t.co/EgoAEPqHCj

[Samuel Groß @5aelo]

Designing a sandbox for V8: https://t.co/YwEWLxXpoF

[Andy Nguyen @theflow0]

Yet another Linux kernel exploitation write-up!

CVE-2021-22555: Turning \x00\x00 into 10000$

https://t.co/Rwb26sGljK

[iFenix @dlymension]

iOS 14.5.1 Kernel POC Exploit Released!!🔥🔥

XNU network stack kernel heap overflow due to out-of-bounds memmove in 6lowpan

https://t.co/opyb3iufHx

By - @i41nbeer

[Maher @azz_maher]

I wrote an LPE for CVE-2014-3153 AKA Towelroot, a bug in the Linux Kernel that was used to root Android devices earlier. The original exploit is closed source and protected against reverse engineering.
PoC + mini write-up here:
https://t.co/uETe1eBnZo

[Mobile Security @mobilesecurity_]

Quick Analysis for the SSID Format String Bug
#MobileSecurity #iOSsecurity by @CodeColorist
https://t.co/ylnkFc6O7S

[Samuel Groß @5aelo]

Finally got around to publishing this document that I wrote some time ago about how (I think) Fuzzilli works: https://t.co/EMrlMcLlse feedback welcome!

[Mickey Jin @patch1t]

@5aelo
I did a similar research like this one before :
https://t.co/8Nb0zaeVka
And even I can run any iOS App on the Xcode Simulator directly :
https://t.co/XYYv7PvtQH

[/r/netsec @_r_netsec]

Exploiting the Source Engine (Part 2) - Full-Chain Client RCE in Source using Frida https://t.co/3SVra0wuti