BinaryChunk

Security Reseacher

[Natalie Silvanovich @natashenka]

Exciting update on Project Zero’s LLM research: https://t.co/TRmtdU9B9g

[Rio @0x09AL]

How do you explain to normal people that modern exploits are actual pieces of art?

[KevinLu @K3vinLuSec]

An Introduction to Chrome Exploitation - Maglev Edition :: — uf0 https://t.co/Aatb6VflAt

[Seth Jenkins @__sethJenkins]

My new Project Zero blog post, Driving Forward in Android Drivers is live! 🥳
https://t.co/9KPUBNsbLm

[Kuba Gretzky @mrgretzky]

This screenshot shows how external bots try to scan a phishing page, hosted by Evilginx Pro.

Every request is made from a different IP address, which ultimately proves that IP blacklisting is dead as a method to block scanners.

JA4 & browser telemetry analysis is the way to go.

[Lau @notselwyn]

Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵

https://t.co/zFimVzjgYB

[Theori @theori_io]

We've started a blog series on N-day full chain exploits.

The first part is about chrome renderer exploit, CVE-2023-3079.

Check it now!👇👇
https://t.co/JTU6RZD2g4

#Theori #티오리 #Blog #Research #Fermium252 #Chrome #VirtualMachine #CVE #Vulnerability

[Man Yue Mo @mmolgtm]

In this post I'll use CVE-2023-6241, a vulnerability in the Arm Mali GPU that I reported last November to gain arbitrary kernel code execution from an untrusted app on a Pixel 8 with MTE enabled. https://t.co/Flsas2jJtv

[0xor0ne @0xor0ne]

Chrome sandbox escape abusing Liftoff assembly by @r3tr074

https://t.co/Yn2REmSIwa

#chrome #infosec

[0xor0ne @0xor0ne]

ptrace, mmap and the clone system calls for process injection in Linux
Credits @BinaryChunk

https://t.co/pWq6yd6dZD

#Linux #infosec

[blackorbird @blackorbird]

#Lazarus exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level access and turn off security tools.CVE-2024-21338
Beyond BYOVD with an Admin-to-Kernel Zero-Day
https://t.co/irFNz3Dntt

[xvonfers @xvonfers]

(CVE-2023-6702)[1501326][$16000][promises, async stack traces]Type Confusion in V8 is now open with a PoC:
https://t.co/9AKdB5oc3A
This vulnerability has existed since the `Promise.any` function was introduced.
https://t.co/z8AQbmsGAF

PoC:
./d8 poc.js
https://t.co/O2rMGbEbmf

[0xor0ne @0xor0ne]

Short blog post introducing how to add psuedo-syscalls and struct definitions to Syzkaller for Linux kernel vulnerability research
Credits @notselwyn

https://t.co/7KmyUzud5H

#Linux #cybersecurity

[BinaryChunk @BinaryChunk]

@ravipandey0007 https://t.co/OhDnAzeeZU

[BinaryChunk @BinaryChunk]

Linux Process Injection: Emulating the Windows VirtualAllocEx and CreateRemoteThread to inject into a Linux Firefox process.

https://t.co/aiI5HCeSXy

[BinaryChunk @BinaryChunk]

@0xor0ne https://t.co/OhDnAzeeZU

[Chalie @pwnipc]

💫 Here are my slides from my @BSidesNairobi : "From Likes To Leaks" 💫. Solving the ‘hack my boyfriend’s WhatsApp’ question https://t.co/WG0OrGxKeA

[Stephen Sims @Steph3nSims]

Reverse Engineering a tcpip.sys DOS Vulnerability https://t.co/r0v5nonOA1

[BinaryChunk @BinaryChunk]

@Amarjit_Labu @JonesBaraza @muchilwa @chuksjonia @k0imet_ @trevorsaudi @ikuamike @Known_Mike @truneski @_theVIVI @AntonyMutiga 😂😂😂