Had an amazing experience at @1ns0mn1h4ck this year, talking about adding NVMe-of/TCP to syzkaller.
In case you want to check it out:
Hereโs the recording - https://t.co/7waJkjcg8A
And the slides - https://t.co/FosaAhYvc4
Quite a few people asked me if weโve found more vulnerabilities in the NVMe Linux kernel driver. So, here is my answer!
Check out the blog post of my colleague Alon on his journey of fuzzing the driver with some lovely findings!
Be sure to check out my recent blog about my latest research โYour NVMe had Been Syzโedโ. In there I show how to add new subsystems to syzkaller, and how to use it to find new vulnerabilities.
https://t.co/7qqyhm0YPF
Finally got around to publishing this post on a ๐๐ง๐๐ฉ๐๐๐๐ก ๐ซ๐ช๐ก๐ฃ๐๐ง๐๐๐๐ก๐๐ฉ๐ฎ ๐๐ฃ ๐ #๐๐ผ๐๐บ๐ผ๐๐ฆ๐๐ ๐๐๐๐๐ฃ!
Dive in if you're interested in the security of the #IBC protocol and the Cosmos in general ๐ชโจ
https://t.co/Xla0lEhSOS
Interesting reading on how to use Static Code Analysis tools for finding vulnerabilities (with a NULL Pointer Dereference in the NVMe driver of the Linux kernel as practical example)
Credits @TalLossos (@TalLossos)
https://t.co/ImxV7XyZ2r
#Linux#kernel#infosec
Check it out! Our resident expert reverse engineer @TalLossos giving his talk on at REcon Montreal.
Topic: Vulnerabilities in the NVMe (Non-Volatile Memory Express) protocol and its extension, NVMeoF (NVMe over Fabrics).
Did you know that NVMe over TCP exists? I sure didn't, but it's a super interesting attack vector.
@TalLossos just put out an excellent blogpost of using CppCheck to find a null pointer deference in the Linux kernelโs NVMe driver. Check it out!
https://t.co/jxvlA0hkSR
Recon 2023 Talk selection has been released, https://t.co/6claXNMpJx The Conference schedule will be published soon. Register here: https://t.co/ZSllUboiiu See you in June!
#cybersecurite#REcon2023#ReverseEngineering
๐ด๐ต๐ข๐กColorful #vulnerabilities on your โจ๏ธkeyboard!
๐กTal @TalLossos & Eran @EranShimony shared their analysis & investigation of Razer's #Linuxkernel module, followed by finding several #0day bugs with a live demo
๐ฟEnjoy the talkโถ๏ธhttps://t.co/wE1tCnTqau
#NullconDE2023