AngelLA

[Pedro Guillén Núñez @_p3r1k0_]

Ya esta disponible la charla que hicimos en @ekoparty miami! @EinyelLA y @_p3r1k0_
Disfrutarla!
https://t.co/ffJRMIOhqc

[Pedro Guillén Núñez @_p3r1k0_]

Acabamos de lanzar @EinyelLA y @_p3r1k0_ de subir el módulo de Metasploit para el CVE-2025-66177 en firmware Hikvision NVR (v4.72/v4.83).
https://t.co/BCcKRNkhH9

[Ekoparty | Hacking everything @ekoparty]

"Desde el Firmware al RCE: Atacando NVRs de Hikvision" by @EinyelLA and Pedro Guillen Nuñez | Main Track #EKOMIAMI2026 ✈️🔥

-

"Desde el Firmware al RCE: Atacando NVRs de Hikvision" dictada por @EinyelLA y Pedro Guillen Nuñez | Main Track #EKOMIAMI2026 ✈️🔥

[Ekoparty | Hacking everything @ekoparty]

EKO Miami 2026 Main Track Talks 🔥

🗣️ “Desde el Firmware al RCE: Atacando NVRs de Hikvision” by @EinyelLA and Pedro Guillén Núñez.

📌 This talk presents a detailed technical investigation into the discovery of two 0-days related to CVE-2025-66177 in Hikvision NVR devices, which also affect other products from the same brand and its subsidiaries.
It covers the entire research process, from firmware acquisition, decryption, emulation, and both static and dynamic analysis for vulnerability discovery and exploitation, to obtaining a real device, achieving full system compromise, and establishing persistence through memory addresses and ROP.

The exploit has been adapted as a Metasploit module, with the ability to automatically identify the target firmware version and support multiple vulnerable versions.

🎯 During the talk, a live demonstration will be performed on a real physical device, and the exploit will be released.
This research brings significant value to the community, as it thoroughly documents a complete methodology for discovering and exploiting 0-days in embedded devices, which can be extrapolated to similar environments. It is a highly technical talk, aimed at offensive and advanced security research profiles, with deep focus on both reverse engineering and exploitation of embedded systems.

✅ This talk will be delivered in spanish.

📅 Ekoparty Miami | May 21–22, 2026
🎟️ Get your ticket now and don’t miss out! >> https://t.co/zeyA4yXic0

-

Charlas Main Track EKO Miami 2026 🔥

🗣️ “Desde el Firmware al RCE: Atacando NVRs de Hikvision” dictada por @EinyelLA y Pedro Guillén Núñez.

📌 Esta charla presenta una investigación técnica detallada sobre el descubrimiento de 2 0 días relativo a CVE-2025-66177 en dispositivos NVR de Hikvision y que también afecta a otros productos de la misma marca y fabricantes subsidiarios.
Abarca todo el proceso de investigación, desde la obtención del firmware, descifrado, emulación, análisis estático y dinámico para el descubrimiento de las vulnerabilidades y la explotación, hasta la adquisición de un dispositivo real, compromiso total del sistema y obtención de persistencia en el mismo a direcciones de memoria y ROP.

El exploit ha sido adaptado como módulo para Metasploit, con capacidad para identificar automáticamente la versión de firmware objetivo y soportar varias versiones vulnerables.

🎯 Durante la charla se realizará una demostración en vivo sobre un dispositivo físico real, y el mismo exploit será publicado.
Esta investigación aporta un gran valor a la comunidad, ya que documenta de forma detallada una metodología completa para el descubrimiento y explotación de 0-days en dispositivos embebidos, extrapolable a otros entornos similares. Se trata de una charla altamente técnica, orientada a perfiles ofensivos y de investigación avanzada en seguridad, que profundiza tanto en ingeniería inversa como en explotación sobre sistemas embebidos.

✅ Esta charla será dictada en español.

📅 Ekoparty Miami I 21 y 22 de mayo 2026
🎟️ ¡Conseguí tu entrada ahora y no te quedes afuera! >> https://t.co/zeyA4yXic0

[Pedro Guillén Núñez @_p3r1k0_]

@EinyelLA and myself found 2 stack overflows in hikvision NVR, stay tuned for more info. 😉
https://t.co/xPgxSu3bQn

[AngelLA @EinyelLA]

If you want to learn advanced attack and defense techniques on Windows kernel, then you should attend the @codemachineinc Windows Kernel Rootkit Techniques training. I enjoyed with this training at Black Hat USA 2022. Thanks T-Roy and CodeMachine for such an awesome training.

[Eric Opdyke @EricOpdyke]

The #crowdStrike Services team has released AutoMacTC a set of python based scripts for Mac IR and triage.
https://t.co/dyVqFcMS6q

https://t.co/O3rphZ3Hzw

[lc4m @luc4m]

Awesome #ursnif TTP summary 👉https://t.co/pHYV0kPs2f
- language and country test
- geoip and stego
- loader chain, persistence
- encrypted drive stealer
@dvk01uk @James_inthe_box @JAMESWT_MHT @malware_traffic @makflwana @pollo290987 @Antelox @VK_Intel @nao_sec

[Sebastian Fernandez @snfernandez]

While everyone is distracted trying Ghidra, Microsoft released DTrace for Windows!!!
https://t.co/3CBRzLjKpX

[Binni Shah @binitamshah]

Windows Process Injection: Writing the payload : https://t.co/qp7yoy4ZJV

Windows Process Injection: Sharing the payload : https://t.co/sxPCwtZfxS

[Cisco Talos Intelligence Group @TalosSecurity]

IDA users: You'll want to know about our new Dynamic Data Resolver plugin, which will make it easier for you to reverse-engineer malware https://t.co/ftsa2SDat4

[Binni Shah @binitamshah]

Take a look into the depths of Windows kernels and reveal more than 60000 undocumented structures : https://t.co/XFHunYQYa9

[X-C3LL @TheXC3LL]

I just started a new blog about pentesting :) https://t.co/zIIUoR0nhY #DoomsDayVault

[Vitali Kremez @VK_Intel]

7-29-2018: Let's Learn: In-Depth Reversing of #Qakbot "qbot" #Banker #Malware Part 1 | Core & Process Injection | Communicator & Inject DLL Component | Observed Configuration | Decoded Template | #Yara + #IOCs ☑️
Thanks @pollo290987 for the sample 👍
-> https://t.co/4B5yrS3Q8z

[Willi Ballenthin @williballenthin]

Here's a quick IDA Pro script for identifying functions referenced as data (think: injected as shellcode): https://t.co/CGwu4PvIaZ

[Somerset Recon @SomersetRecon]

Introduction to IDAPython for Vulnerability Hunting https://t.co/6R36u9zLH3 #IDAPython #IDAPro #Python

[Binni Shah @binitamshah]

Sniff-Paste : OSINT Pastebin Harvester : https://t.co/p5Ffqdnb89

[Tommy @PythonMist]

Ph0Neutria - A Malware Zoo Builder That Sources Samples Straight From The Wild https://t.co/oFMBOrpG4F #Clamav #Crawling #Database #Linux

[malware.lu @malwarelu]

New article on #AgentTesla stealer by @futex90. https://t.co/8J0KyxpDVc #Malware

[hasherezade @hasherezade]

"Practical #Malware Analysis" - a course by Sam Bowne (@sambowne):
https://t.co/CmlS9BWlnu