Sebastian Muniz

Security researcher, hardware crasher and some other useless characteristics in real life.

[Andrés Blanco @6e726d]

¿Queres aprender sobre hardware hacking? ¿Tu empresa o productos utiliza hardware de terceros y no sabes cómo auditarlos? ¿Tenes dispositivos IoT en tu red y queres hacer un pentest? Anótate en mi training de la @ekoparty y aprende de forma práctica.

https://t.co/UgVb6aAJeM

[Andrés Blanco @6e726d]

Este año voy a estar dando un training sobre cómo auditar sistemas embebidos. Podes aprender a auditar desde un wireless router a un aire acondicionado smart de manera práctica.

[Albert @intthree]

Danger danger danger 🚨

[Federico Kirschbaum @fede_k]

ekoparty CFP is open, this is a great opportunity to share your work with the LATAM community.

What are you waiting for?

[SwordBytes Security @SwordBytesSec]

We are super excited about releasing this advisory! Hope you enjoy it! ⚔️

Overwolf 1-Click Remote Code Execution (CVE-2021-33501)

Thanks @TheOverwolf for your great work fixing the issue!

https://t.co/584x8XL5ey

[frycos @frycos]

Since Cisco PSIRT became unresponsive and the published release 4.22 still doesn't mention any of the vulnerabilities, here are 12 PoCs in 1 gist:

https://t.co/h31QO5rmde

[john @nyan_satan]

Apple Lightning (cont.) - serial number reading

Explains what happens inside of Serial Number Reader app, why some old SNRs randomly stopped working as actual SNRs and what we can try to do about it

As always, read on your own risk!

https://t.co/53rrNUBOQk

[Sebastian Muniz @_topo]

@noptrix @yunginnanet @m3g9tr0n @netspooky @hackerfantastic @janmuenther @antranigv @pgt_r2ursystem @Tatramaco @thexerocouk @GammaTHC @nrzIzrn @thugcrowd @vxunderground @Adam_pi3 @tobiasgyoerfi @kripthor @RuraPenthe0 @banesec The usual suspects hahaha 😂

[Maxim Goryachy @h0t_max]

The code of PoC avalible on our github page: https://t.co/PCu6i493oL

[Jeremy Boone @uffeux]

Today we publish the details of a fault injection vulnerability affecting the MediaTek BootROM. We achieved code execution in the context of the Preloader, fully circumventing secure boot. Unpatchable. There’s a hole in your SoC: https://t.co/15HKWRKo5T

[PythonArsenal @PythonArsenal]

Hexrays Toolbox - Find code patterns within the Hexrays AST. Based on IDAPython. https://t.co/bFUAZRdHxq

[Qiling Framework @qiling_io]

MAJOR UPGRADE!

Finally Demigod, a kernel module(.sys .ko .kext)emulator merged into Qiling.

Qiling now able to emulate both kernel module and binary with advanced instrumentation

https://t.co/6N3hq0JiGh

Tips: dev branch

Special thanks: @unicorn_engine @tuanit96 @quangnh89

[IDontCode @_xeroxz]

Hyper-V hacking suite for Intel & AMD. Works on every single version of windows 10 (2004-1511). Had fun with this one.

https://t.co/PGjjixc82G

[Lê Hữu Quang Linh 🇻🇳 @linhlhq]

Here is the writeup for some VMware bugs I found recently (CVE-2020-3989, CVE-2020-3990).

[Raelize @raelizecom]

Enabling Flash Encryption on the ESP32 makes exploiting a Secure Boot bypass more complex.

We leveraged a design weakness in order to inject an arbitrary value in the encrypted data (CVE-2020-15048).

This value is then loaded into PC using an EM glitch!

https://t.co/zLWNfGmAdH

[Dirk-jan @_dirkjan]

So yes, Zerologon (CVE-2020-1472) is quite easy to exploit. Unauthenticated user to Domain Admin. This is really scary. Run exploit, DCSync with DC account and empty NT hash: you have Domain Admin and a broken DC.
Awesome find by Tom Tervoort 🙂. Patch patch patch!

[RET2 Systems @ret2systems]

Lucid is a new and interactive IDA plugin that makes it effortless to study the Hex-Rays microcode as it flows through the decompilation pipeline:

BLOG: https://t.co/SQt42SNlmY

CODE: https://t.co/sNZHWqEMl6

[Ekoparty | Hacking everything @ekoparty]

🥁🥁🥁 We're ready to announce... #Ekoparty 2020 SPEAKERS!! 🔥

⚡️ https://t.co/qEBhSrnFKE ⚡️

From Russia to Mexico, from France to Argentina, head to our website for the full expert lineup! We're thrilled to have you all at #eko2020 🤩

Full timetable coming soon!
#pwndemic

[Ben Hawkes @benhawkes]

Project Zero blog: "Attacking the Qualcomm Adreno GPU" -- https://t.co/k4IfhMgr0O

[Rolf Rolles @RolfRolles]

New blog entry: An Exhaustively-Analyzed IDB for ComRAT V4. This is one of the most thorough analyses I've ever done; certainly the largest. https://t.co/aNGznvKMm8