ixty

[ixty @_ixty_]

Mandibule: Linux ELF injector for x86 / x86_64 / arm / arm64
Doesn't use dlopen() and can inject into statically linked targets by mapping manually the elf in memory from syscalls only.
https://t.co/Xa53L2MVVN
https://t.co/vQvuTnCnup
#elf #injection #lowlevel

[Synacktiv @Synacktiv]

One of our ninjas (@_ixty_) wrote a series of articles explaining how to write a win32 keylogger that supports all input languages (that don't use input method editors). You can find below the last part which focuses on the text reconstruction process. https://t.co/O9l3udFmyU

[Synacktiv @Synacktiv]

One of our ninjas (@_ixty_) wrote a series of articles explaining how to write a win32 keylogger that supports all input languages (that don't use input method editors). You can find here the second part which focuses on keyboard layout DLLs. https://t.co/u4TXgmRI9p

[Johannes Weber 🎸 @webernetz]

This is it: The Ultimate PCAP. A single downloadable #pcap with more than 50 network protocols! Use it as your single #Wireshark sample file. https://t.co/iYZHTlCYVz

[Synacktiv @Synacktiv]

One of our ninjas (@_ixty_) wrote a series of articles explaining how to write a win32 keylogger that supports all input languages (that don't use input method editors). Here is the first part which focuses on capturing keyboard events!
https://t.co/6vZxqlaPLt

[Hexacon @hexacon_fr]

Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022.

Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: https://t.co/lM8CWUnCtj

#HEXACON2022

[Synacktiv @Synacktiv]

The video of @elvanderb "macOS: How to Gain Root with CVE-2018-4193 in less than 10s" is available!

https://t.co/nlpqkfhMkn

[Synacktiv @Synacktiv]

Patch your Packet Filter: OpenBSD & FreeBSD remote DoS in 2 IPv6 packets. Please don't fragment the Internet" #CVE-2019-5597 https://t.co/1LZF9uAFVh

[Synacktiv @Synacktiv]

Slides for @elvanderb presentation "macOS: how to gain root with CVE-2018-4193 in < 10s" @offensive_con are available! https://t.co/WGCDGBKJ1T

[Synacktiv @Synacktiv]

Learn about Modmob tools by @FlUxIuS to test mobile devices and monitor networks at @WEareTROOPERS #TR19 https://t.co/kxGkK1QyLk

[Synacktiv @Synacktiv]

Fifty shades of UEFI: an initiation to SMM practices https://t.co/HKgZmKc4sC

[Petr Beneš @PetrBenes]

My new blogpost: WoW64 internals - from the kernel initialization, through turbo thunks, "WoW64 functions", xtajit, CHPE, ... all the way to "Heaven's Gate" on ARM.

https://t.co/PutdA7PwLr

[Synacktiv @Synacktiv]

iOS12 Kernelcache laundering: adding PAC instructions and kernelcache relocations support to IDA via IDAPython https://t.co/YbHYbLsHce

[Synacktiv @Synacktiv]

The slides of the "Heapple Pie: the iOS/macOS default heap" presentation by @elvanderb at @sth4ck are available on the @Synacktiv website: https://t.co/YGgSUNtJCI

[Synacktiv @Synacktiv]

New blog entry! Hunting mobile devices endpoints via mobile data interception and firmware analysis https://t.co/zzrdFtBUH2 by @FlUxIuS

[Synacktiv @Synacktiv]

@elvanderb is focusing on macOS/iOS from an exploitation point of view @sth4ck - Slides soon available!

[ElfMaster @ryan_elfmaster]

Props to jpanic, I was privileged enough to be the first to reverse engineer the most radical x86_64 Linux Virus ever written. This paper is old, but fascinating for Virus authors http://83.133.184.251/virensimulation.org/lib/vrn01.html

[ixty @_ixty_]

@chaignc Yeah ok, and i still owe you a pull request for the arm64 package configuration :)

[ixty @_ixty_]

Mandibule: Linux ELF injector for x86 / x86_64 / arm / arm64
Doesn't use dlopen() and can inject into statically linked targets by mapping manually the elf in memory from syscalls only.
https://t.co/Xa53L2MVVN
https://t.co/vQvuTnCnup
#elf #injection #lowlevel

[A Maestretti @maestretti]

Using ptrace() for memory injection. One of those syscalls you hope not to see in prod. https://t.co/xlXG7fHyph

[ixty @_ixty_]

@Luiz0x29A @cryptoishard I needed the tool aswell a month ago for a challenge :) wanted to inject a few debug hooks into a program and realised i couldnt ld_preload cause it was a static bin and i couldnt believe there was no tool out there that could load my .so into a static bin.

[ixty @_ixty_]

@chaignc Thanks, arm_now is great, i used it during debugging because qemu-user-static chroot doesnt support ptrace! I only wish i could specify the vm folder from the cmdline to switch from arm to arm64 without mv'ing :)