Dimitrios Slamaris

Cyber Cyber Security

[Dimitrios Slamaris @dim0x69]

I just released two new chapters on
https://t.co/mtvcCtSNSD

"Embedded Hacker Tools" and "Embedded Communication Protocols"

What changed ↓

[Dimitrios Slamaris @dim0x69]

@TEMP43487580 Does that really work? I assume that you need an Client, which actually has consented Scopes for DRS, right? Or does 1b730954-1685-4b74-9bfd-dac224a7b894 that actually have (i see only policy_management) https://t.co/L7XAFqiQyS

[Dimitrios Slamaris @dim0x69]

@TEMP43487580 https://t.co/dyfrIb0ipM

[Qualys @qualys]

The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk. https://t.co/uDHHSuzd5f

[lukas seidel @pr0me]

@LowLevelTweets @dim0x69 that was such a good read, super well explained. will need to have a look at the other chapters, too

thanks for sharing!

[Low Level @LowLevelTweets]

if you're interested in securing embedded applications, this introduction to ARM Trustzone by @dim0x69 is insanely good: https://t.co/7SCcLJkiNB

[Orange Tsai 🍊 @orange_8361]

PHP just fixed one of my RCE vulnerabilities, which affects XAMPP by default. Check to see if you are affected and update now! 🔥
https://t.co/EQdzNTihOm

[Dimitrios Slamaris @dim0x69]

New Blog post: Understanding Primary Refresh Tokens and CVE-2021-33779: How "Pass-the-PRT" was eliminated

https://t.co/vCXw2caKc3

[0xor0ne @0xor0ne]

Excellent introduction guide to ARM TrustZone and embedded systems security by @dim0x69

https://t.co/IVKWDz01tg

#trustzone #infosec

[Binni Shah @binitamshah]

Embedded Systems Security and TrustZone : https://t.co/drf1buKyFg credits @dim0x69

[Binni Shah @binitamshah]

ARM Exploitation - Defeating DEP - executing mprotect() : https://t.co/H11rtIOJCE

ARM Exploitation - Defeating DEP - execute system() : https://t.co/0LlZ6KulNq

ARM Exploitation - Setup and Tools : https://t.co/vK8UMNZu0k

ARM Exploitation: Return oriented Programming (Building ROP Chains) : https://t.co/rYp5bUXywf credits @dim0x69

[Gerhard Klostermeier @iiiikarus]

I've just released a new version of MifareClassicTool 🎉
Also, we just reached 4000+ stars on Github. 🌟

Wasn't really fun to program, but necessary. Lot's of compatibility fixes and you can now change the language and theme.

Have a great 2024!

[0xor0ne @0xor0ne]

Reverse engineering of AES protected USB flash drives
Excellent research @matthiasdeeg

https://t.co/aAkowTOfh3
https://t.co/Xgrl5gpnh8

#hardware #infosec #aes

[0xor0ne @0xor0ne]

Nice Introduction to embedded systems security and TrustZone
Credits @dim0x69

https://t.co/IVKWDz01tg

#trustzone #cybersecurity

[Mario (マリオ) Romero @Cyrivs89]

Extremely proud to announce some of the research I/we have been conducting over the last few months at the Hardware Security Research lab at @TIIuae. This is my first vulnerability and public CVE (CVE-2023-35818). Security advisory by the manufacturer: https://t.co/Dxe8IOXwEX

[Hank Green @hankgreen]

Massively under-reported science story because there's so much going on right now but...it turns out that we might have figured out what's causing this very scary spike.

Quick thread, on how WE'VE BEEN ACCIDENTALLY GEOENGINEERING FOR DECADES...but then we stopped:

[Dimitrios Slamaris @dim0x69]

Anybody already in Heidelberg @WEareTROOPERS on sunday evening and up to a little meetup? :)

[Dimitrios Slamaris @dim0x69]

@schniggie @WEareTROOPERS @CyberWarship @Carlos_Perez @curi0usJack @PyroTek3 @_wald0 @harmj0y

[Dimitrios Slamaris @dim0x69]

Weak Sesstion Ticket Encryption Keys strike again: https://t.co/oy8FD80Aas

[hardenedvault @hardenedvault]

Memory corruption in JCRE: An unpatchable HSM may swallow your private key
https://t.co/dd1JAEGJnG #hsm #javacard #wallet