Alex Tereshkin

Poked firmware before it was cool. Security researcher @NVIDIA. Opinions expressed are my own.

[Alex Tereshkin @AlexTereshkin]

A recording of our #defcon31 talk "Breaking BMC - The Forgotten Key to the Kingdom" is now available: https://t.co/teAlbtMnrQ
cc: @Adam_pi3

[Antriksh (Yoda) #hardwear_ioNL2025 @antriksh_s]

@solardiz is on stage ! Linux kernel guard #nullconBerlin2025 #nullcon

[Phrack Zine @phrack]

Phrack on MainStage at #defcon33 at noon! @Adam_pi3 @chompie1337 @richinseattle @netspooky

[BINARLY🔬 @binarly_io]

Nvidia OSR (@AlexTereshkin, @Adam_pi3) reveals high-impact Supermicro BMC vulnerabilities (CVE-2024-10237/38/39). Binarly REsearch documenting the details:

👻Ghost in the Controller: Abusing Supermicro BMC Firmware Verification.

Read the full story: https://t.co/uzMnkdXflY

[Adam 'pi3' Zabrocki @Adam_pi3]

Together with @AlexTereshkin we managed to summarize NVIDIA Offensive Security Research (OSR) work on breaking BMC (reference to our DefCon talk https://t.co/4VBhcLhcUa). This blog post also includes a link to the full paper.

[Adam 'pi3' Zabrocki @Adam_pi3]

I'm delighted to share that our talk "How to Secure Unique Ecosystem Shipping 1 Billion+ Cores?" has been accepted to @BlackHatEvents #BHUSA 2025!
How to create a secure unique ecosystem from scratch? What's Separation Kernel? How and why to modify RISC-V? come to our talk! :)

[Tavis Ormandy @taviso]

You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. https://t.co/4NYerRuFo1

[Nikolaj Schlej @NikolajSchlej]

Found a nice little SecureBoot bypass in a sizable bunch of UEFI firmwares, will share the details when able.
Meanwhile, this is the SHA2-256 of the PoC tool to trigger it:
530584749f90d187ac20f77c6d4bb2e09ec1c852090962dfab01c4274a8a6d2d

[droogie @droogie1xp]

New blog post: Tales from the Call-Gate: An SMM Supervisor Vulnerability
https://t.co/qFsxkXrwZC
@kiqueNissim

[Alex Tereshkin @AlexTereshkin]

Nice writeup! Thanks guys.

[BINARLY🔬 @binarly_io]

🚨New! "CVE-2024-36435 Deep-Dive: The Year’s Most Critical BMC Security Flaw."

🔥Classic buffer overflow vulnerabilities resurface in BMCs, remotely opening the gates from the castle.

🏆Kudos to @AlexTereshkin for the initial discovery and disclosure!

https://t.co/lVQBjboiwf

[Alex Tereshkin @AlexTereshkin]

Thanks, Xeno. Those were fun times indeed. Much respect to LegbaCore research! #ResearchRespect

[Xeno Kovah @XenoKovah]

I'm trying to start a positive security trend of #ResearchRespect wherein we give shoutouts to researchers whose work we really respect and describe why. I'll go first (in no particular order) with "Attacking Intel BIOS" by Rafal Wojtczuk and @AlexTereshkin at BlackHat 2009

[Alex Tereshkin @AlexTereshkin]

@matrosov @binarly_io Brings back memories indeed! Congrats!

[Alex Matrosov @matrosov]

#LogoFAIL abstract is online! Embargo ends on Dec 6th. LogoFAIL impacting all major IBVs reverence code: AMI, Insyde, and Phoenix. Also, this attack is not silicon-specific but UEFI-specific🔥 and impacts ARM and x86.

Kudos to @Binarly_io REsearch team!

https://t.co/igcLHRGvZ8

[Alex Matrosov @matrosov]

🔬OSR Team keeps rocking! @AlexTereshkin and @Adam_pi3 keep digging into BMC and FW rabbit hole.

🔥The main caveat is that most of those discoveries are related to IBVs reference code and impact the entire industry.

⛓️One vendor fix != Industry
⛓️Supply Chain Security is hard!

[Alex Tereshkin @AlexTereshkin]

@DrJason_C @Adam_pi3 https://t.co/qDA737omcP

[Alex Tereshkin @AlexTereshkin]

Check out the abstract of our upcoming DC talk :)
CC: @Adam_pi3

https://t.co/KbUlB0RbsL

[Alex Tereshkin @AlexTereshkin]

@DrJason_C @Adam_pi3 Here you go

https://t.co/kUOlkuYeEL

[Alex Tereshkin @AlexTereshkin]

@Grazfather @Adam_pi3 @defcon @mbazaliy @igoooo Thanks! The slidedeck: https://t.co/kUOlkuYeEL

Demo is here: https://t.co/qDA737omcP

[Adam 'pi3' Zabrocki @Adam_pi3]

What is BMC? Should we care about BMC's security? How easy is it to hack it?

You can find all the answers during our talk (CC @AlexTereshkin) at @defcon at 3:30pm on Saturday ;-) Join us!

https://t.co/AHL2hOTMQg

CC: @mbazaliy, @igoooo, NVDA RISC-V FW dude

#DEFCON31 #Defcon

[Alex Tereshkin @AlexTereshkin]

We enjoyed doing this research, super fun stuff. See you all in Vegas!

[Adam 'pi3' Zabrocki @Adam_pi3]

"Accepted Presentation:
Breaking BMC: The Forgotten Key to the Kingdom
Congrats! Your @defcon 31 Submission is accepted!"

I'm super exited about the 3rd DefCon talk in a row! :)

CC: Alex Tereshkin (@AlexTereshkin)

#defcon31 #defcon