Binary Gecko

Binary Gecko GmbH. Custom Security Research Solutions. Organisers of @offensive_con.

[Binary Gecko @Binary_Gecko]

Offensivecon X Pwn2Own 🤝

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at https://t.co/9SorA5wpnS

[Binary Gecko @Binary_Gecko]

What does a kernel MTE panic actually look like on Apple Silicon? We built tooling to find out — and to make it KASAN-style useful.

Pointer tag, memory tag, tag map. All in the panic output.

👉 https://t.co/7NQ3IZj2A6

#AppleSilicon #MTE #KernelSecurity #iOSSecurity

[offensivecon @offensive_con]

Interested in becoming a speaker at Offensivecon Tokyo? You have three months to submit your talk on an innovative offensive security topic.

More information here 👉️ https://t.co/ynVQnUBDrj

[offensivecon @offensive_con]

Reduced rates for Offensivecon Tokyo's attendees only available until 30 June!

➡️ https://t.co/i7O9ftkK03

[offensivecon @offensive_con]

Offensivecon's talks are now available on our YouTube channel!

🔗 https://t.co/cBmHPsj7qV

[offensivecon @offensive_con]

The conference ticket shop for Offensivecon Tokyo is open!
Not many tickets left...
🔗 https://t.co/0jFnO9MiL8

[offensivecon @offensive_con]

Your TEE Is Only as Strong as Its Interconnect: Breaking SEV-SNP using AMD's Infinity Fabric by csrrw and bschlueter

[offensivecon @offensive_con]

Pedal to the Metal: Accelerating to the Host via VirtualBox VMSVGA by @terrynini38514 and @xiaobye_tw

[offensivecon @offensive_con]

A 0-Click Exploit Chain For The Pixel 10 by @natashenka and @__sethJenkins

[offensivecon @offensive_con]

From Zero To Root: Attacking Qualcomm DSP Driver by Xiling Gong

[offensivecon @offensive_con]

Offensivecon is coming to Tokyo! 🔗 https://t.co/VGZ1shw2b1

Ticket shop, sponsorships and CFP are already open...

[offensivecon @offensive_con]

Exploiting Android Apps with Counterfeit Art by Philipp Mao and @therokdaba

[offensivecon @offensive_con]

Navigating the MTE Landscape: iOS Memory Protection Deep Dive by @Pat_ventuzelo and @_Noiche

[offensivecon @offensive_con]

IRON GIANT: When The Vault Becomes The Victim by @hexnomad

[offensivecon @offensive_con]

Beyond the Limits of Site Isolation by @ifsecure

[offensivecon @offensive_con]

From Samsung Account to RCE: A Journey to a Remote 0-Click Capability by Kaufi

[offensivecon @offensive_con]

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter by @eternalsakura13 and R1nd0

[offensivecon @offensive_con]

4-Byte Heap Overflow To RCE In Minecraft by @ryaagard

[offensivecon @offensive_con]

Design-Based Vulnerabilities on macOS: Oops, Not a One-Shot Fix by @Guluisacat

[offensivecon @offensive_con]

SELECT shell FROM postgres: Digging up a 20-year-old bug for https://t.co/sOCysMhhpT by @pspaul95 and @stdoutput

[offensivecon @offensive_con]

Exploiting QSEE Vulnerabilities In Google's Wifi Pro by @pulsoid