Jusepe

InTernet lover

[GitHub Security Lab @GHSecurityLab]

Learn how to write CodeQL queries to find security vulnerabilities in the 2nd part of CodeQL zero to hero series by @BlazingWindSec https://t.co/oz2WKn1AaV

[PortSwigger Research @PortSwiggerRes]

Stuck on a blind PHP file-read? @_remsio_ has just built on @hash_kitten's research using filter chains to trigger an OOM oracle and leak file contents.
https://t.co/74coHX1vuY
https://t.co/rQYZLn134K

[Sam Curry @samwcyo]

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies:

https://t.co/xCHG5oLYWK

Contributors:
@_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

[0xor0ne @0xor0ne]

Series by Matt Mastracci on reverse engineering the bluetooth protocol
used by a coffeemaker and implementing a control software using #Rust

1: https://t.co/olf74uuyZW
2: https://t.co/bBfppgHc5W
3: https://t.co/LYCSsRxHw9

#rustlang #bluetooth #reverseengineering #infotech

[0xor0ne @0xor0ne]

A few years old but still a good series by @LimitedResults on ESP32 reverse engineering and exploitation

crypto-core: https://t.co/XYBE8i7kVE
Secure Boot: https://t.co/M76QQiOP5Y
Boot Keys Extraction: https://t.co/0T1pkEPkLW

#esp #espressif #iot #infosec #cybersecurity

[Jusepe @Jusepe_it]

However, libc is in fact the one that is in charge of that task (https://t.co/EQdqkDR4Qs) . Created a simple PoC to test how .init section is only loaded when is linked with libc.
https://t.co/xQ9MnGyVWN

[Jusepe @Jusepe_it]

Interesting how Linux seems to delegate some of ELF specification compliance. According to the specs "When a program starts to run, the system executes the
code in this section before calling the main program entry point" (refering to .init section).

[Bilgin Ibryam @bibryam]

How To Debug Distroless Docker Containers?
https://t.co/5DX4xoKc2l

[Jusepe @Jusepe_it]

@roman_soft @flaggermeister 🙈🙈

[Flaggermeister @flaggermeister]

We won DEADFACE CTF 2022 by @CHacktics !

So nice CTF, we loved the way that the story and the challenges are related. Its sucha a pleasure to participate on CTFs like this.

[w2k3builder @w2k3builder]

I've just finished the #w2k3builder project, so you can debug/modify/compile Windows Server 2003 source code. The script included makes all work for you. Thanks to: @0r1g3n3s @therealdreg @s0sinh4 @NTDEV_ for the awesome feedback. Magnet in my bio.
https://t.co/mDgl2Lh8Kf

[raptor @0xdea]

Another awesome #BGGP3 writeup (well, not exactly an entry for the context but close enough)!

Tetsuji: Remote Code Execution on a GameBoy Colour 22 Years Later

https://t.co/PmVlqiJzCR

[VCSLab @vcslab]

From 1day to 0day (CVE-2022-30024) on TP-Link TL-WR841N from our IOT team member @Nobey98 👍👍https://t.co/SPzHvEGaeb

[Georgios Baltas @gebaltas]

From investigating an OOB read bug report in the Quicksort implementation of the Hermes JS engine to building an RCE exploit

https://t.co/nMHNgutoEs

[reverseame @reverseame]

The Android kernel mitigations obstacle race https://t.co/Gx20KDuCBI

[shubs @infosec_au]

Really well written post by @fransrosen on breaking OAuth implementations through postMessage gadgets that leak URLs. Awesome research, I loved following the journey. Totally worth the time it took you to do this. @avlidienbrunn is a great sounding board. https://t.co/z2BO6WYnTm

[Angel Montes @_N0xi0us_]

This year's @synackredteam recognition program is over and I was inducted into the acropolis due to my performance.
https://t.co/3lA8nusZNg

I would also like to congratulate all the srt colleagues who earned their spot as they did an amazing job throughout the year.

[reverseame @reverseame]

Exploiting an Unbounded memcpy in Parallels Desktop
A Pwn2Own 2021 Guest-to-Host Virtualization Escape https://t.co/PaUeiUPqfH

[Jusepe @Jusepe_it]

W25Q512JV flash high level driver for rpk2 by @therealdreg , also used it to create a CTF challenge for @uad360. May come handy when developing your own driver or just to grasp how flash devices work.
https://t.co/VaKmZ1BnPb

[Binni Shah @binitamshah]

Reverse Engineering Flutter Apps : https://t.co/8Fgw7MOEfS credits @BorisBatteux