Mysterie

IT Security researcher, bug hunter, code breaker

[Mysterie @Myst3rie]

Reliable exploitation of VirtualBox VM escape (64bit Host) ! http://t.co/E5ls7XEBDN

[Mysterie @Myst3rie]

@struppigel https://t.co/TqzdouPAW0 support 2.5 to 2.7 and is more reliable than the original "uncompyle2"

[Project Zero Bugs @ProjectZeroBugs]

Racing against the clock -- hitting a tiny kernel race window https://t.co/b9IvPXzU68

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #341 consacré aux outils EDR (Endpoint Detection and Response) avec @Myst3rie

https://t.co/QgyXYM3amF

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Bad month Microsoft, hmm?

[Felix Wilhelm @_fel1x]

An EPYC escape: Case-study of a KVM breakout https://t.co/tZ40Hmt0ql

[Mysterie @Myst3rie]

@aris_ada visual studio code is free :p

[Mysterie @Myst3rie]

@4rchib4ld https://t.co/K8UTz1xdfV

[Dmitri Alperovitch @DAlperovitch]

PSA: If you haven’t yet patched your #Exchange, don’t bother. It's too late. You’ve demonstrated that you are not capable of managing the difficulties of running on-prem infra. Migrate immediately to a cloud-email service (O365/Google) and deprovision your compromised Exchange

[Shane Huntley @ShaneHuntley]

New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development.

https://t.co/Ec2TaMMXeQ

Stay safe out there everyone!

[Ian Beer @i41nbeer]

Excited to finally publish my lockdown project from earlier this year: an iOS zero-click radio proximity exploit odyssey.
https://t.co/UXQvemH0hG

[doar-e @doar_e]

New blogpost by @__x86 with @azimuthsecurity: "Modern attacks on the Chrome browser: optimizations and deoptimizations" https://t.co/9FtMLDRfvP

[[email protected] @CodeColorist]

One bug was introduced by iOS 6. Another one was introduced by iOS 3. That is, this grandpa bug also affects the very first generation of iPhone. It has survived more than 10 years. Honestly I don’t believe that I’m the first one who found this.

[TrendAI Zero Day Initiative @thezdi]

#VMware patched 6 CVEs on Tuesday. Today, ZDI’s @renorobertr dishes the details on two of them (Incl PoC) in his 1st blog for us. Read the top notch analysis of CVE-2020-3981/3982 at https://t.co/WjIw8rI2JB

[Caroline Lemieux @cestlemieux]

PANGOLIN: Hybrid fuzzing, but instead of getting a single input from SymExec , get an over-approximation of the path condition of interest. Then fuzz by sampling randomly from that approx. The approx can also speed up solving of other path conditions. https://t.co/T0VFU59I0K

[Lord_Idiot @__lord_idiot]

My VirtualBox escape bug/exploit writeup from earlier this year is up! I hope it's an interesting read 😁

[Synacktiv @Synacktiv]

Advisory for the two vulnerabilities found by @OnlyTheDuck and @BrunoPujos is now public! CVE-2020-3962 and CVE-2020-3969 impact the SVGA 3D component of VMware hypervisors and were reported to @thezdi during #Pwn2Own 2020. Stay tuned for more details!

https://t.co/xPh2nDGxmz

[Brandon Azad @_bazad]

I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: https://t.co/bmXwdzWywU

[Nicolas Joly @n_joly]

Uploaded my slides on Hacking Excel Online at #SSTIC2020. Big thank you to the organisers for making that possible! https://t.co/ccGoKhHaY6

[Synacktiv @Synacktiv]

We've just presented at @sstic how a 1-day vulnerability in Samsung Trustzone can be used to rewrite the Shannon baseband memory and install a debugger on a Galaxy S7 phone.

The PDF 🇬🇧 and talk 🇫🇷 are here:
https://t.co/Kdfc3xO7TF

The tools are here:
https://t.co/NGznogNTDX

[Chaouki Bekrar @cBekrar]

iOS Security is fucked. Only PAC and non-persistence are holding it from going to zero...but we're seeing many exploits bypassing PAC, and there are a few persistence exploits (0days) working with all iPhones/iPads. Let's hope iOS 14 will be better.

https://t.co/39Kd3OQwy1