MAKI

Offensive Security | Trying to understand things

[Jachash @jachashx]

The 40-year-old iOS kernel bug I discovered on the DEFCON 34 main stage.

My demo crashed on stage, and after investigating I traced it to a mistyped ++ that goes back to 1985.

Can you spot the bug?

Full post:

https://t.co/e3vuomAJ8r

[Satoshi Tanda @standa_t]

Got an AMD PC with SMM supervisor enabled. It is going to be interesting to compare it with Intel's counterpart.

For anyone interested in what it is, check out @ivansprundel and @droogie1xp 's research
https://t.co/ak6NI18iCr
https://t.co/om4Tj26OOa
https://t.co/dgO2Eklgei

[Marcelo Samsoniuk @samsoniuk]

wow! "new" i860 book arrived here today! 🔥

[xvonfers @xvonfers]

🙃I'm not hinting at anything, but...
[v8ctf] chrome 126.0.6478.55(update the deployed version).
https://t.co/6c6P8mIrCP
https://t.co/DV6eEwn8pc
https://t.co/yzDGfHTGqz
https://t.co/a9ghnLyHGS

[Edward Snowden @Snowden]

They've gone full mask-off: 𝐝𝐨 𝐧𝐨𝐭 𝐞𝐯𝐞𝐫 trust @OpenAI or its products (ChatGPT etc). There is only one reason for appointing an @NSAGov Director to your board. This is a willful, calculated betrayal of the rights of every person on Earth. You have been warned.

[celeste @vmfunc]

your "privacy-friendly" arc browser relies on firebase and logs everything to their servers?

(researched with @xyz3va)

[xvonfers @xvonfers]

Exploit a vuln to corrupt funcrefs within the sandbox -> modify funcrefs to point to functions with different signatures -> invoke corrupted funcrefs using call_ref or return_call_ref -> cause tagged vs. untagged type confusion -> ... -> SBX
https://t.co/W7fwAokEZg

@5aelo

[Marcel Böhme👨‍🔬 @mboehme_]

Surprising facts about #fuzzing. A thread in slides 👇

[Hakai Offsec @HakaiOffsec]

🌐 Windows Admin-To-Kernel Elevation of Privilege(CVE-2024-21338)

No estudo mais recente publicado em nosso blog, @biscoitomesmo detalha a CVE-2024-21338

🔗 Leia o artigo completo aqui:
https://t.co/ItHDs2bZKY

[YveltalGriffin @YveltalGriffin]

This is the PS Hanami, my handmade Playstation 1 portable that I designed and built in one month! It uses a REAL PS1 motherboard that I cut in half, folded like a book, and rewired. NO emulation! Details in🧵

https://t.co/WF8F8KgAiw

[MAKI @c1cerus]

https://t.co/pMFIHrNCLS

[MAKI @c1cerus]

https://t.co/KQkXe5iOiX

[0xTen @_0xTen]

76a62b975b1e12c82bc08343a891d7b138058320504bb38c43a3c6eecc8cb8ec
⛈️

[Paulo Dutra - PU4THZ @DutraCGI]

Lançamento do nosso satélite MicroRad na #OBSAT na #UFSCar em São Carlos!

Equipe NoizOrbita.

[0xor0ne @0xor0ne]

Car infotainment system hacking.
Series on embedded system hacking by greenluigi1:

https://t.co/PbvYmuOUOx
https://t.co/T0PfIpvtve
https://t.co/9bVyXFoVcI
https://t.co/lsFVuo8c2C
https://t.co/kMEGsrarqg
https://t.co/holYWVy2Ib
https://t.co/dHmGWIUYVh

#automotive #infosec

[安坂星海 Azaka || VTuber @AzakaSekai_]

#threatintel
someone just leaked a bunch of internal Chinese government documents on GitHub
https://t.co/BO8N64A7kF

[[email protected] @r3tr074]

Omgggg my first Chrome CVE, a heap overflow in blink memory. Yet trying exploit with a novel cross-cache technique.. news soon :D

[LaurieWired @lauriewired]

Happy New Year everyone!

Made a QoL update to JADXecute, my plugin for JADX that enhances functionality by adding Dynamic Code Execution abilities.

Branch is now up to date with latest stable JADX release, along with other minor code improvements. Enjoy!

[r3kapig @r3kapig]

We spent some time backing up most of the CTF challenges for 2023 (there are bound to be incomplete cases) The attachments and title descriptions we have compiled and some writeup. Now We open it to the community. hope it can help u
https://t.co/BGCqZ37wTU

[ASIS-CTF @ASIS_CTF]

🚀 The #ASIS #CTF Final 2023 is set for December 29-30! 🗓️ Calling all CTFers to join in for an epic showdown and compete against each other in the last CTF of the year!
https://t.co/p8KzTPP8sI
💻🏆 #ASISCTF #CTF2023 #CaptureTheFlag #InfoSec