Aleph Research

Security Research by HCL Tech

[Aleph Research @alephsecurity]

As promised - after the first part discussing the nitty-gritty details of the research, here comes the juicy vulnerability report! Here's everything that could go wrong with your 2,000 ILS smart lock, culminating with a complete wireless takeover!

https://t.co/0iexc6qZFi

[Aleph Research @alephsecurity]

Our newest research about smart locks is up! Enjoy (and lock the doors!)

https://t.co/RjkHJq2HBU

[Aleph Research @alephsecurity]

New research paper on smart air conditioner vulnerabilities found by the team:

https://t.co/Qv6uS3qKIn

[Aleph Research @alephsecurity]

Presenting a short walkthrough on our journey running QEMU AFL++ on android we've done a few months ago
@hackerschoice https://t.co/LdIDrSMGcM

[Itai Greenhut @Gr33nh4t]

I just compiled #QEMU for AFL on @Android! Now I can do blackbox #fuzzing from anywhere😉 #Noxpwaste

[Aleph Research @alephsecurity]

As per the Linux embargo policy, a potential LPE Linux kernel vulnerability @Gr33nh4t discovered was made public today, 14 days after disclosure. Here are the details. https://t.co/OmHsekoU6j

[Aleph Research @alephsecurity]

During the pandemic @Gr33nh4t & @waveburst decided to improve our own office wireless equipment by finding vulnerabilities in them. Check out our new blog post about that! @ArubaNetworks https://t.co/12aYOcuIQq

[Aleph Research @alephsecurity]

We are excited to share an #XXE vulnerability in the JDOM @java library! discovered by @ST42562572
https://t.co/pkKrjkx0lD

[Itai Greenhut @Gr33nh4t]

I just compiled #QEMU for AFL on @Android! Now I can do blackbox #fuzzing from anywhere😉 #Noxpwaste

[Aleph Research @alephsecurity]

We're thrilled to publish our last #homograph #phishing attack post by @tzachyh. This time we found various implementation flaws in instant messaging clients. https://t.co/fI9JDPTXfv

[Aleph Research @alephsecurity]

@Gr33nh4t has found a new Ubuntu LPE, he found a way to #exploit @ubuntu's "Apport" crash handler to achieve privilege escalation. Check out his new research.
@ubuntu_sec
https://t.co/FPnEMuEmzD

[Itai Greenhut @Gr33nh4t]

Last week I've finished a vulnerability disclosure with @ubuntu_sec of a few vulnerabilities I discovered in Ubuntu, they did an awesome job providing reliable fixes very quickly.

I'll share more details about these vulnerabilities soon on @alephsecurity.
https://t.co/TQ53QuuViu

[Jonathan Afek @JonathanAfek]

Graphic framebuffer support! After a long while, found time for the iOS QEMU project and finally got graphics working on iOS 14! There's still a lot of work to arrange it but hope to release it soon with iOS 14 support.

[Aleph Research @alephsecurity]

We are thrilled to present our follow-up research on Ruckus Wireless devices. @waveburst found new critical vulnerabilities and managed to overcome the previous research fix.
https://t.co/HiToFdEpFs

[Jonathan Afek @JonathanAfek]

Now you can hook kernel functions with custom code and sniff all mach messages passed in the system. https://t.co/kvVqwI46QP

[Aleph Research @alephsecurity]

post by @tzachyh

[Aleph Research @alephsecurity]

After some delay, here's the 2nd part of our Homograph research in which we show how we bypassed browsers IDN policy and take a deep dive into Unicode definitions.

https://t.co/Ob42I9hpLd

[Gal Zror @waveburst]

#Ruckus has confirmed six additional CVEs for my latest research. I will present new RCEs on Ruckus devices using these vulnerabilities at #defcon28 #DEFCONSafeMode

[Aleph Research @alephsecurity]

Another milestone for iOS on QEMU!

The project can now run with KVM!
Go check out the new blog post by @levaronsky :)

https://t.co/0wv2OfMgG8

[Aleph Research @alephsecurity]

New features added to our project's repository!

* iOS on QEMU KVM support
* ASLR disabled for user mode
* TFP0 for user apps
* CoreTrust patched - no need for static trust cache

Check it out and feel free to contribute!

https://t.co/uClu4PGVva

[Aleph Research @alephsecurity]

Our recent update enables communication with iOS on QEMU via TCP sockets, including SSH! @levaronsky explains the inner workings of our solution: https://t.co/fBLbaq94TK