guyru

Vulnerability research, cryptography, FOSS, finance and random stuff.
Leading @cellebrite's iOS research.

[guyru @guyru_]

Interested in iOS vulnerability research? @Cellebrite's iOS team is expanding. We're looking for seasoned researchers (all platforms) as well as juniors with iOS jailbreak scene background.
Positions are remote and you get a chance to work with very talented and friendly people.

[guyru @guyru_]

@jonklinger מזכיר לי איך בטירונות היו לנו תולעים בסולת לדייסה. נגד המטבח לא חשב שתברואה זה עניין חשוב. משק הדת לעומתו הפך את המטבח על זה

[guyru @guyru_]

@abdiisan It's the same protocol, just that on windows it uses TCP sockets instead of Unix sockets.
Regarding Ghidra 11, I guess I need to update the docs as I don't really test on it anymore. I tested 12.0+.

[guyru @guyru_]

ghidra-rpc 0.3.0 is out.

The main new feature is Windows support. There are also quite a few fixes and improvements to better guide agents through their workflow. The new version also fully supports Ghidra 12.2.

https://t.co/ohOudcdBrt

[guyru @guyru_]

@dis0908_ @udunadan Yes, but they still have top-notch researchers on their team. AI is a great tool to accelerate research, but without good researchers (for now at least), you might accelerate in the wrong directions

[guyru @guyru_]

Seeing LOKI shown on stage was truly not something I thought would happen until recently. We're hiring iOS researchers to our team to work new iOS capabilities to assist our law enforcement customers

[Hexacon @hexacon_fr]

Revisiting SecureROM Adventures by Steven De Franco (@iH8sn0w)

[guyru @guyru_]

@udunadan No. Not in VR and definitely not in exploitation yet.

[guyru @guyru_]

@DianaRafaelHut @Dugri_Thoughts זה לא לגמרי נכון. יש עלויות לא טריוויאליות לעבודה עם מזומן. הפקדה עולה כסף, בלדרות עולה כסף, אבטחה וכו'. עמלת האשראי זניחה לעומת זה.

[guyru @guyru_]

@NeevCohen Mainly looking for experienced researchers or experience from the JB scene. You can have a look at our career page: https://t.co/Ob4OpNZzYW

[Cellebrite @Cellebrite]

Our team is shining in the City of Lights! ✨

We're having such meaningful conversations at @hexacon_fr in Paris. At the booth, people are stopping by and staying for hours to solve the combined Pokémon and vulnerability research challenge we developed. (1/2)

[guyru @guyru_]

@Echelon__H You should have been with us there to pay respects in person

[guyru @guyru_]

@m40282845 Might be that they are applying for different visa types. Over here L1's and O1's are much more common that H1B afaik.

[guyru @guyru_]

Corellium being useful in real world iOS chain analysis

[guyru @guyru_]

@yevgets @danbodanbod ב-8200 יש קבע (שהתארך לאורך השנים) שמבטיח שהיחידה תקבל תמורה להשקעה.
בנוסף, אם לא היה גיוס חובה שמבטיח שהטובים ביותר יגיעו ליחידה לא ברור אם המודל היה מחזיק. לאנשים הבאמת טובים שמושכים את היחידה קדימה אין שום סיבה לעשות התמחות של שש שנים. הם בכל מקרה ימצאו עבודה בקלות

[André Moulu @andremoulu]

Still looking for talented vulnerability researchers to join our French team 🇫🇷

If you're attending #Hexacon, stop by our booth and let's talk. We'd be happy to discuss the role, the team, and the kind of research challenges we work on.

See you there 😀
https://t.co/CDfzCniMz8

[guyru @guyru_]

@OphirHarpaz @IddoYadlin I did something similar for a smart scale. I took the adb, connected claude-code using ghidra-rpc and asked it to reverse engineer the BLE protocol and re-implement it first in Python and then using Web Bluetooth API. It eventually worked quite well https://t.co/1tCgIY7GKy

[guyru @guyru_]

I'm coming to Paris for Hexacon (again) in two weeks. Drop by our booth to say hi.

[Hexacon @hexacon_fr]

5⃣ /5⃣ Five out of five years as sponsor for Cellebrite!📱

@CellebriteLabs focuses on vulnerability research and exploitation allowing law enforcement agencies to collect evidence via physical access vectors.

[guyru @guyru_]

Github link: https://t.co/mPrNFR8UDY

[guyru @guyru_]

ghidra-rpc now has experimental Windows support

I don't use Windows myself, so I'd appreciate people trying it out and telling me what breaks. Issues and feedback welcome!

[guyru @guyru_]

We're mostly an IDA shop at @CellebriteLabs, but I decided to play around with Ghidra. My main motivation was to experiment with agentic reverse engineering techniques. The result is an agent skill for Ghidra, which we are releasing publicly:
https://t.co/mPrNFR8mOq >>

[guyru @guyru_]

@idofrizler בפעם הראשונה שלי בפריז ביקשתי לחמם קרואסון. המוכרת הסתכלה כאילו משהו לא בסדר אצלי, אבל ביקשתי שוב. היא שמה את הקרואסון במיקרו. מאז אני לא מבקש לחמם מאפים בצרפת.

[guyru @guyru_]

Oxygen being Russian was kind of widely known truth. I get they apparently certified otherwise to federal agencies, but shouldn't it been quickly exposed by a simple background check?

[Kim Zetter @KimZetter]

Oddly, I reported back in 2016 that Oxygen was Russian-owned. This was never a secret in the digital forensics industry, but US federal agencies were still fooled by the company's claims of US ownership. Here's the 2016 piece mentioning Russian ownership https://t.co/9IBAjLDR2l