Daniel Baier

"young" enthusiast for vulnerability research, malware analysis, martial arts and philosophy

[volatility @volatility]

We have announced the winners of the 2025 @volatility
#PluginContest! And the First Place is:

Daniel Baier for XFRM Inspector

Read the full Contest Results in our blog post:
https://t.co/D5lwMbOJV0

Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics

[volatility @volatility]

We are excited to announce the 2025 @volatility #PluginContest First Place winner is:

Daniel Baier for XRFM Inspector

See the full Contest Results: https://t.co/D5lwMbOJV0

Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics

[Daniel Baier @danielbaier]

The basic idea: use the TLS secret labels as identifier

[Daniel Baier @danielbaier]

New blog post: How to use BoringSecretHunter to automate byte-pattern extraction for hooking BoringSSL with friTap on Android for TLS key extraction. Read more: https://t.co/AG26TXqnQV

[Daniel Baier @danielbaier]

My colleague Pascal developed E2VA a framework for learning Android userspace exploitation
#mobilesecurity
https://t.co/twfx2f3kMX

[Rafael Uetz @ru37z]

We just released SOCBED (Self-contained Open-source Cyberattack experimentation testBED) v1.2.0, featuring a couple of usability tweaks, bug fixes, and attack improvements:
https://t.co/Hj07yjTFrT

[Daniel Baier @danielbaier]

friTap - Decrypting TLS on the fly
#mobilesecurity #frida
https://t.co/JzLiJe9YjT

[Axelle Ap. @cryptax @mastodon.social @cryptax]

Malware analysts, feel free to use Androscope (beta). It helps you search for Android malware that implement a given malicious feature. Example: "find sample using native packer", or "find sample which turns off ringer mode" etc.
Research tool: https://t.co/bvTioRIN4e

[cwe_checker @cwe_checker]

We released version 0.6 of the cwe_checker today! Highlights: Bare-metal analysis mode and improved checks for buffer overflows and use-after-free CWEs. Go check it out! https://t.co/JfMldFVLhB

[Mobile Security @mobilesecurity_]

Smali2Frida - Genarate Frida Hooks from .smali files
#MobileSecurity #AndroidSecurity by @ApkUnpacker
https://t.co/WhjIjiGXN8

[Malwrologist @DissectMalware]

Puzzled why a yara rule did or didn't match?

Let me introduce https://t.co/cY3G5MeOk6, a web-based #yara #debugger!

With #YaraDbg, you can see the:
1⃣ evaluation steps
2⃣ matched strings
3⃣ relationship among the rules

[/r/netsec @_r_netsec]

fee - Execute ELF binaries without dropping files on disk https://t.co/QsYVMMzsP3

[Mobile Security @mobilesecurity_]

reFlutter - Flutter Reverse Engineering Framework
#MobileSecurity by @ptswarm
https://t.co/Naz4yYlN8m

[Łukasz @maldr0id]

This looks cool! A brief survey of code obfuscation techniques.

https://t.co/EB4ECYjU73

[Łukasz @maldr0id]

Repository of malware samples with some analysis exercises by @jstrosch

https://t.co/oqRezZ1XGv

[RET2 Systems @ret2systems]

Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary, how hard could it be? Check out our latest blogpost to find out: https://t.co/BN3KLKNXol

[tmp.0ut @tmpout]

We are pleased to announce tmp.0ut Vol. 1
https://t.co/b8uMqeNjht

[434B @0xricksanchez]

Requesting help: All folks that fiddle with disassemblers/decompilers a lot, please participate in this short survey (~30 min): https://t.co/cIoYm8QjJ5. Retweets are much appreciated. This would help us out a lot :). Thanks in advance!

[quarkslab @quarkslab]

[BLOG] Interested in rooting Google Android emulators? Here is a quick introduction to the Android Emuroot project. It describes the enhancements made by Eric to support Android 10 & 11 based on the initial work of @AirbusSecLab: https://t.co/IxgifFtmLb

[Malpedia @malpedia]

Milestone reached: We have just added the 2000th malware family to @malpedia! 🥳
We would like to express sincere gratitude to everyone who has contributed to or otherwise helped the project!