Karate!

-:# // DFIR 💻📱Codebreaker ⚙️ Caving ⛰🏋️‍♀️🏊 // #:-

[Karate! @May_Pol17]

GitHub - Magpol/fridafde: How-to use Frida to bruteforce Secure startup on Samsung S7 Edge https://t.co/11j5vIwCN3

[Bjoern Kerler @viperbjk]

I've let my AI tools research all session logs (whether successful or failed) of the past year and let it destill a lessons-learned master reverse engineering skill. Here it is for you as well to enjoy:
https://t.co/dH4dzjKf1X
P.S.: There might a tool being spoiled which is tbr.

[guyru @guyru_]

We're mostly an IDA shop at @CellebriteLabs, but I decided to play around with Ghidra. My main motivation was to experiment with agentic reverse engineering techniques. The result is an agent skill for Ghidra, which we are releasing publicly:
https://t.co/mPrNFR8mOq >>

[Tom Dörr @tom_doerr]

iOS and macOS decompiler for IPA files

https://t.co/dIQ9yFnLwq

[NK @Nikaiw]

meet VMkatz, https://t.co/eza4AXRuFT

[0xor0ne @0xor0ne]

TP-Link Tapo C200: from reverse engineering to full root access

https://t.co/bZs0gVGO5L

Credits @qkaiser

#infosec

[Renzon @r3nzsec]

DFIR analysts who use macOS as their daily driver deserve free and native forensic tooling. So I built one. 🍎

Introducing 𝗜𝗥𝗙𝗹𝗼𝘄 𝗧𝗶𝗺𝗲𝗹𝗶𝗻𝗲 — a timeline analysis app built from the ground up for Mac-based DFIR folks, forensic investigators, or SOC analysts. Built in appreciation of, and inspired by, Eric Zimmerman’s Timeline Explorer.

Every feature in this tool was shaped by real IR casework. Handling massive timelines, parsing artifacts here and there, and pivoting across logs during active investigations. I built IRFlow Timeline to be the native macOS timeline analyzer that actually keeps up with a live case. Every button and view is intentional; if it’s in the app, it’s because I needed it mid-case and realized the standard tools fell short.

No dependencies. Zero setup. Just drag, drop, and analyze.

#dfir #incidentresponse #timeline #macos #threathunitng #digitalforensics

[Tom Dörr @tom_doerr]

Switches mouse and keyboard between computers by dragging the cursor

https://t.co/LMbG4IFZWE

[0xor0ne @0xor0ne]

MediaTek exploit that lets you write to arbitrary memory via the Download Agent, bypassing DA2 signature verification

https://t.co/jYc9aDbJYS

Blog post by @shomykohai

#infosec

[Dave Kennedy @HackingDave]

Just released a new tool that scans for Bluetooth devices including Bluetooth Low Energy (BLE) devices. It will scan for all, filtered by MAC, or if you have the Identity Resolving Keys (IRK), can be used to determine the Resolvable Private Address (RPA).

Works on MacOS, Windows, and Linux.

https://t.co/4ws9eSaZvn

#TrustedSec #BinaryDefense

[Dan Guido @dguido]

New: I'm sharing the @trailofbits Claude Code defaults. This is how we setup, configure, and use claude code:
https://t.co/aEIXdpCztt

[Nicolas Krassas @Dinosn]

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot https://t.co/GDlAihM1iF

[Matt Brown @nmatt0]

Making my tooling public:
https://t.co/MOxvO0rc4V

[0xor0ne @0xor0ne]

Bootloader vulnerability and firmware decryption in TP-Link (Tapo) C210 cloud cameras

https://t.co/jUb9a1NTpd

Credits @Watchful_IP

#embedded #infosec

[0xor0ne @0xor0ne]

GDB over a serial connection for debugging the kernel on a Pixel 8

https://t.co/xcqguFkgat

Credits @andreyknvl

#infosec

[Roger @r0rt1z2]

Since Nothing decided to ignore my report, I decided to release it publicly.

You can find the source code and full details here: https://t.co/zHIwBEfaFG

It only supports the Nothing Phone 2a for now but it should apply to more MediaTek devices from what I've seen so far.

[remy🐀 @_mattata]

Android APK’s have a dedicated loader for Ghidra, but they’re also Archives with nested files which is a different loader. This causes quirks.

Here’s how to get around that and use the best tool.

Ghidra Is Best: Android Reverse Engineering https://t.co/X1h6doj9Nt

[Karate! @May_Pol17]

@NVIDIAGeForce Oh my! 20 years. Still one of the best games made. Great memories 😍 #HalfLife2RTX

[Bjoern Kerler @viperbjk]

For those willing to go full bluetooth and wifi drone monitoring via zmq, here you go: https://t.co/zB0xwS0K7x

[0xor0ne @0xor0ne]

Starting with embedded devices reverse engineering (Beginners series)
Credits @voidstarsec

Ghidra setup: https://t.co/Nwwtah9Aco
Tools: https://t.co/CVbjCFB57Y
Firmware extraction: https://t.co/Dnz3Xr7WJa

#reverseengineering #cybersecurity

[wrongbaud @wrongbaud]

Happy Monday, time for a new blog post!

JTAG Hacking with a Raspberry Pi - Introducing the PiFex

https://t.co/EI5OSDN8GN