NighterMan

UNIX enthusiast

[IOActive, Inc @IOActive]

"... IOActive has demonstrated that data bits stored in the example antifuse memory can be extracted using a well-known semiconductor failure analysis technique..." Our latest blog highlights this technique used in the RP2350 Challenge from @Raspberry_Pi. https://t.co/G0BuDhiRn1

[raptor @0xdea]

This is awesome!

#Linux #kernel #CVE #exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

https://t.co/xTdHeKuadH

[Shift @Shiftreduce]

The year of "re-hosting your favorite firmware target on QEMU and fuzzing it".

[Vitaly Nikolenko @vnik5287]

uploaded my last stream - Android / Linux kernel SLUB aliasing, ie when special-purpose caches get merged with general-purpose kmalloc caches. hope it will be useful https://t.co/GGoOzXVYJ1

[Vitaly Nikolenko @vnik5287]

centos 8 / rhel 8 / ubuntu 14.04, 16.04, 18.04 poc is uploaded https://t.co/b3IJoxMaHI. The tech report is public too https://t.co/UHsMYScN9Y

[Alexander Popov @a13xp0p0v]

My write-up covering @offensive_con talk!

CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem
https://t.co/rXTaqzoAAZ

@offensive_con slides: https://t.co/oKyNC3dTER

PoC exploit demo video: https://t.co/tIaurXLAOF

Enjoy!

[m0n0sapiens @m0n0sapiens]

What? A library that wraps IDA decompiler API and makes it usable? *and* documented?

We just released a thing.

Blog: https://t.co/l5tTwaU4d7

Github: https://t.co/XE8qMD59U8

Docs!!!: https://t.co/N4KySWyW43

[Nico Waisman @nicowaisman]

I know a lot of people will be delighted by this: We are releasing CodeQL for FREE for OSS and Academia. We also have a new VSCode extension: https://t.co/5ST5xbVFpD

[Gonzalo J. Carracedo @BatchDrake]

So here it is, the first SigDigger release: https://t.co/nNVGxGAN51

There is probably a bunch of bugs and glitches, but it should be usable. Anyone in the mood to build it? :D

[Pepe Vila @cgvwzq]

My talk is already public: https://t.co/jgs9Qntgfi

[Pepe Vila @cgvwzq]

Slides from my talk: https://t.co/AOXhBtwi93

[RPW: @[email protected] @esizkur]

TIL: You can find SunOS 4.1.x, Solaris 2.6, Ultrix 4.3, IRIX 6.5.5, AIX 4.1.3 and OSF/1 1.0 source trees on https://t.co/AjHqkjNga2: https://t.co/zXBxZZOLXC

My 16yo self is rejoicing with joy.

[Andrey Konovalov @andreyknvl]

Slides for my "Coverage-guided USB Fuzzing with Syzkaller" talk @offensive_con https://t.co/2trxROys9k

[Jacob Baines @Junior_Baines]

In response to @Zerodium's recent MikroTik tweet, I put some of my RouterOS bug hunting experience in writing: https://t.co/EeZQJenTgV #BugBounty

[thomas @LimThomas168]

we have updated our payout table for Pwn0rama #pwn0rama #coseinc

[/RootedCON @rootedcon]

Primeros ponentes confirmados de RootedCON 2019
https://t.co/dLLhFQsSbA
#rootedcon #rooted2019

[NighterMan @NighterMan]

@revskills @_jsoo_ @trimosx I do not remember you suffering on that hell... 😂

[dragosr @dragosr]

unauth, unassoc remote code exec on the Marvell Avanstar Wifi chip SoC used in Playstations, Xbox, Surfaces, Chromebooks, Samsung phones and more in under five minutes attack time. Bonus second stage escalation in the linux drivers, PoC on steamlink.

https://t.co/s54QBc5mDK