R0 CREW

A community of low-level information security researchers.

[OFFZONE @offzone_moscow]

OFFZONE 2022, August 25–26

Early bird tickets are now on sale:
- ₽8,500 individual rate
- ₽13,500 corporate rate
- ₽4,500 for holders of student IDs
- +₽7,000 admission to the Speaker Party
Your OFFZONE 2020 ticket is still valid.

Buy tickets https://t.co/yWMwLu3YMd

[R0 CREW @R0_CREW]

OFFZONE 2022, August 25–26

[OFFZONE @offzone_moscow]

#CallForPapers OFFZONE 2022

We are pleased to announce the CFP for our third event which will take place in Moscow.
We invite researchers to share their expertise in offensive and defensive domains. Please, submit your papers before July 3.

Learn more: https://t.co/DkC8Qh2vvR

[R0 CREW @R0_CREW]

IDA PRO 7.7 SP1 LEAKED AGAIN!

For more info check out our chat:

https://t.co/1HIe3dZ9ZU

#idapro #ida #leaked #tools #reverse #decompilers

[OFFZONE @offzone_moscow]

🔥OFFZONE 2022 to be held in summer
Hi there. It's been quite a while, but now we're back with good news: the next #OFFZONE will take place on August 25–26, 2022.
Follow us and stay tuned :)
https://t.co/N1U99JMs57

[Maxim Goryachy @h0t_max]

Finally, we've published the results of our three-year research of Intel Microcode, using it now you can earn up to $150,000.

[Hex-Rays SA @HexRaysSA]

Our congratulations to the winners of Hex-Rays Plugin Contest 2021!🎉🎁🎆

🥇 Tenet by @gaasedelen

🥈 D-810 by Boris Batteux, eShard

🥉 nmips by @galli_leo_

With many excellent entries selecting just three was a real challenge. Take a look yourself: https://t.co/BZ5SNE9Y8g

[R0 CREW @R0_CREW]

@PELock @HexRaysSA @BinjaDevs @erikpistelli @sublimehq @Burp_Suite @acunetix @jebdec @netsparker @e_kaspersky @kaspersky @onlinenic @ICANN @EstonianPolice Topics do not contain pirated files. They just link to other sites. Just like these pages on github:

https://t.co/PDbPDPEznB
https://t.co/CpWvYdXve9
https://t.co/s34yQN8wrx

So, you should complain to those sites that store pirated software, and not to us.

[R0 CREW @R0_CREW]

@VolgaCTF 2021 is an international inter-university cybersecurity competition with a local conference taking place in Samara, Russia on September 13-17.

[VolgaCTF @VolgaCTF]

Do you want to get to #VolgaCTF?
Register, choose a day and come!
To get to the conference on September 14-16, you need to register — https://t.co/a5YLfWCROo
We remind you that ADMISSION IS FREE!
Schedule of presentations on our website https://t.co/e99gxfEwAK

[Maxim Goryachy @h0t_max]

The ELF-file inside microcode update, Intel Atom uCode format and etc. Details in slides from our @ZeroNights 2021 talk "Chip Red Pill: How we achieved to execute arbitrary [micro]code inside Intel Atom CPUs". https://t.co/r54EkxvYxa

[Maxim Goryachy @h0t_max]

Finally after our public talks and papers about DCI Intel officially admitted that CPU and PCH has "per-part “password” into the product through the debug interface (i.e., JTAG, I3C, USB) which is used to authenticate (and unlock)."

[R0 CREW @R0_CREW]

@Gi7w0rm No one has been found yet.

[R0 CREW @R0_CREW]

[LEAKED] IDA Pro 7.6 SP1 + HexRays (x86/x64/ARM/ARM64/MIPS)

Some guy "gogogo" came to our telegram (https://t.co/rd78r0O678) chat and leaked IDA Pro 7.6 SP1.

https://t.co/RBH5CkUlzH

#idapro #ida #leaked #decompilers

[R0 CREW @R0_CREW]

@mavillon1 FYI!

When the above links are dead, you better look at the source of the leak:
https://t.co/6Mi7KwGGCc

[R0 CREW @R0_CREW]

[LEAKED] IDA Pro 7.6 SP1 + HexRays (x86/x64/ARM/ARM64/MIPS)

Some guy "gogogo" came to our telegram (https://t.co/rd78r0O678) chat and leaked IDA Pro 7.6 SP1.

https://t.co/RBH5CkUlzH

#idapro #ida #leaked #decompilers

[Cyberlands.io @Cyberlandsio]

Do you need to research the security of your Android app for free? Check out TOP-10 open-souce security assessment tools guide https://t.co/qaTao2DRar #androidsecurity #mobilesecurity #securityresearch https://t.co/qaTao2DRar

[Cyberlands.io @Cyberlandsio]

Do you have an iOS app and want to have its security checked? Discover 10 open-source ten tools that we love when doing the same thing for living https://t.co/hdcUkXtOop https://t.co/hdcUkXtOop

[b33f | 🇺🇦✊ @FuzzySec]

Pssst, Ghidra 10.0 is out => https://t.co/29AG7a0Une There is debugger support now which is great, that will definitely bridge a usability gap 🧙‍♂️🌶️

[ZeroNights @ZeroNights]

r0 Crew supports #ZeroNights2021!

It is a community of information security researchers. The main goal of the community is to create an environment for meetings, communication, and exchange.

[PT SWARM @ptswarm]

New article "How we bypassed bytenode and decompiled Node.js (V8) bytecode in Ghidra" by our researcher Sergey Fedonin.

https://t.co/C4duuwrrK5

[Maxim Goryachy @h0t_max]

[1/4]People ask us (+@_Dmit and @_markel___) for details about undocumented crbus instructions. We recorded the demo showing that for access to crbus requires only execute arbitrary code with root/admin privilege.
(details below)

[Man Yue Mo @mmolgtm]

In the last part of the Chrome beta + Android full chain series, I'll use a Chrome WebAudio UAF I reported last September (which turned out to be a bug collision) to gain RCE in the renderer sandbox. https://t.co/WhwqCQvwA3