Alex

Security Researcher, focus on baseband firmware security, network protocol security,

[Mathias Payer @gannimo]

As it turns out, fuzzing IoT devices is challenging due to extremely constrained resources. We explored Cortex-M TrustZone apps to find bugs. And we found them @IEEESSP #IEEESP2024 Paper: https://t.co/pv7ncsPx1I

[暗戳戳发财 @Nasdaqprinter]

非常有感触，如果你还在成功道路上挣扎，你看了这段黄仁勋在2011年关于对失败容忍的演讲，也许大概能理解美国知名股评人吉姆・克莱默黄仁勋是有史以来最伟大 CEO，超过马斯克 $NVDA

[offensivecon @offensive_con]

Beyond Android MTE: Navigating OEM's Logic Labyrinths by @patateqbool @maxpl0it @MateuszFruba and @munmap https://t.co/97dDo5VsKL

[offensivecon @offensive_con]

0-Click RCE on the Tesla Infotainment Through Cellular Network by @_p0ly_ and @vdehors https://t.co/dXntBdQLQV

[xvonfers @xvonfers]

Full Chain Baseband Exploits.
Details of the baseband and baseband-to-AP pivot vulnerabilities, exploitable for RCE, chained together at the same time
▶️Part 1: https://t.co/dpuDI33JhF
▶️Part 2:https://t.co/rJajpOgMdZ
▶️Part 3: https://t.co/aZVUj8GY6c

@TaszkSecLabs @kutyacica

[starlabs @starlabs_sg]

The Old, The New and The Bypass - One-click/Open-redirect to own Samsung S22 at Pwn2Own 2022
written by @testanull
https://t.co/cN9EPOMLua
Thanks to @thezdi for reviewing and inputs to the blog post. Greatly appreciate that.

[Alex @AlexMyFavorite]

@ele7enxxh same on baseband firmware😇

[zh1x1an1221 @zh1x1an1221]

Very cool video, she analyzed all the security vulnerabilities I have studied

https://t.co/BOMzCar69a

[Nicolas Krassas @Dinosn]

Two RCE (CVE-2023-28562 and CVE-2023-28581) Bugs in Qualcomm Chips Expose Billions of Devices to Attacks https://t.co/RpCwdehyT1

[Cos(余弦)😶‍🌫️ @evilcos]

既然有朋友问如何入门 Web3 安全（尤其是智能合约安全），我简单列点当下觉得还不错的资源吧。牢记下：这玩意，最重要的是实战，是需要你一天到晚长期在这个领域积累，才可能有些成就。另外，兴趣一定是最大的驱动力，三天打鱼两天撒网，那不叫兴趣，那叫自欺欺人...

[INSU YUN @insu_yun]

I am happy to announce that "BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software" is accepted to Usenix Security '23. This work is related to static analysis to find logical bugs in baseband firmware.

[Zion Leonahenahe Basque @mahal0z]

I'd like to publicly introduce BinSync, a cross-decompiler collaboration tool and suite. With BinSync, you can finally share reversing data, like Types, across all your favorite decompilers (IDA, Binja, Ghidra, angr) on-the-fly. https://t.co/jjeH1VaBTi. See thread for demos.

[dmnk.bsky.social @domenuk]

x86 looks like garbage - out of context @amatcama

[Alex @AlexMyFavorite]

@domenuk @amatcama 🤝

[Yongdae Kim ([email protected]) @yongdaek]

* LTESniffer: An Open-source LTE Downlink/Uplink Eavesdropper *

We open-source LTESniffer, accepted at @acm_wisec '23.

LTESniffer supports: Real-time decoding of
+ Downlink traffic from the base station.
+ Uplink traffic from nearby users.

https://t.co/WuQ3PtswUw

[Alex @AlexMyFavorite]

@DGACRadio 泰裤辣

[Alex @AlexMyFavorite]

@RahulKankrale nice work!

[Alex @AlexMyFavorite]

@adonkidz7 @SamsungMobile 0.0 Well, thanks for your reply, bro. Let's win more bounties!

[Alex @AlexMyFavorite]

Can anyone tell me how to parse the GFH file format of this Mediatek baseband and load it correctly into IDA Pro?