We recently achieved guest-to-host escape by exploiting a QEMU 0day.
We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive.
Writeup coming next week.
GitHub - cisagov/decider: A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework. https://t.co/saqdOxbpzm
A 13 year old coded a botnet control framework that utilizes pastebin and github for control of hosts in red teaming…
This makes the hacker in me so hopeful.
Check out pastebomb when it’s dropped!
PoC Exploit Released for 0-day Windows Kernel
of Privilege Vulnerability (CVE-2024-21338) : https://t.co/vBcaCQ9MSi
https://t.co/vHofGL819e
Details : https://t.co/ngV9GWaYDU
@vladimircicovic@GMahovlic@ivanmarkovicsec Pogledaj Davida / h1kari, on je radio čuda, a lokalno ti je @KatjaPericin imala projekt jako davno oko fpga i kriptoanalize (za jtr mislim). gpu je nekako u zadnje vrijeme uzeo primat za tu namjenu...
Btw, you don't need a Flipper Zero to "hack" dumb radio protocols. The piece of wire is enough.
Check out how to receive and decode 433MHz radio signal just with a PC sound card.
Bluetooth vulnerabilities in Android, Linux, macOS, iOS and Windows can be exploited to pair an emulated bluetooth keyboard and inject keystrokes without user confirmation : https://t.co/9nP22p69wW credits @marcnewlin
Slides : https://t.co/IjzxL1QStj
CVE's :
CVE-2024-0230
CVE-2023-45866
CVE-2024-21306
New blog post is out! Extracting the SecOC keys used for securing the CAN Bus on the 2021+ RAV4 Prime. https://t.co/iWCiZumQCH
Research started all the way in 2022, but took many evenings of reverse engineering to get code execution.
PoC: https://t.co/ZCDH9EaJjm
Researchers create AI worms that can spread from one system to another : https://t.co/5oMH3qx5cQ
ComPromptMized : Unleashing Zero-click Worms that Target GenAI-Powered Applications : https://t.co/5oMH3qx5cQ
Paper : https://t.co/g1t0h2EFGw credits @ben_nassi
@jduck Covered all in presentation, but in short: CPU with Intel CET/AMD Shadow stack support, Linux kernel 6.6+, glibc 2.39+, ELF binary compiled with x86 feature: SHSTK (all 64 bit!). Yep, it needs recompilation, but some distros (like Ubuntu) already correctly compiled some binaries.