kost

Security/Hack. FLOSS security software contributor.

[kost @k0st]

First #bsides #belgrade is ready to kick off. Excited to participate!

[OtterSec @osec_io]

We recently achieved guest-to-host escape by exploiting a QEMU 0day.

We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive.

Writeup coming next week.

[Milan Gabor @MilanGabor]

@k0st kicking of @BSidesZagreb! Pssst… It’s always DNS! #bsidesZagreb

[kost @k0st]

@antoniozekic zvuci kao da si iskopao neki gadni 0 day :-p

[kost @k0st]

See you at @BalCC0n !

[BalCCon @BalCC0n]

#BalCCon2k25-Against the current is just around the corner on 19| 20| 21 September 2025!You don’t want to miss: @travisgoodspeed @MalwareUtkonos @gannimo @herrmann1001 @joegrand @GMahovlic @Th3PeKo @micko_mame @k0st …Secure your spot now at : https://t.co/iLimMI2ofx #BalCCon

[Clandestine @akaclandestine]

GitHub - cisagov/decider: A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework. https://t.co/saqdOxbpzm

[Dino A. Dai Zovi @dinodaizovi]

The entire 3rd-edition of @rossjanderson's "Security Engineering" is available free as PDFs now!

https://t.co/4Mjd9TOzUp

[kost @k0st]

See you in Zadar this week!

[BSides Zadar @BSidesZadar]

[SPEAKER ANNOUNCEMENT]

BSides Zadar welcomes @k0st!

Vlatko will uncover unique strategies in his talk:
"Secrets of Password Cracking - Croatian Edition"

🗓️ Sept 13 | 📍 Hotel Kolovare, Zadar

#BSidesZadar #CyberSecurity #BSides

[Craig Rowland - Agentless Linux Security @CraigHRowland]

A great write-up on Linux process name stomping techniques from @haxrob

h/t @thoughtb0x

https://t.co/U1R4lHE02G

[kost @k0st]

Recommended Hacker wellness!

[BalCCon @BalCC0n]

@travisgoodspeed @ghidraninja @vanjasvajcer @k0st @vyrus001 @FuzzyAleks @ktemkin @obiwan666 @doctorow @elkentaro @carfucar @WillCaruana @maltman23 @ComplexEvo @gannimo @kurmus @UnaPibaGeek @sergeybratus @bojanz @JulienValiente

[JS0N Haddix @Jhaddix]

A 13 year old coded a botnet control framework that utilizes pastebin and github for control of hosts in red teaming…

This makes the hacker in me so hopeful.

Check out pastebomb when it’s dropped!

[Binni Shah @binitamshah]

PoC Exploit Released for 0-day Windows Kernel
of Privilege Vulnerability (CVE-2024-21338) : https://t.co/vBcaCQ9MSi

https://t.co/vHofGL819e

Details : https://t.co/ngV9GWaYDU

[kost @k0st]

@vladimircicovic @GMahovlic @ivanmarkovicsec Pogledaj Davida / h1kari, on je radio čuda, a lokalno ti je @KatjaPericin imala projekt jako davno oko fpga i kriptoanalize (za jtr mislim). gpu je nekako u zadnje vrijeme uzeo primat za tu namjenu...

[Flipper Devices @flipper_net]

Btw, you don't need a Flipper Zero to "hack" dumb radio protocols. The piece of wire is enough.

Check out how to receive and decode 433MHz radio signal just with a PC sound card.

[kost @k0st]

@retBandit @IBM Good luck and hope both IBM and you will grow!

[Help Net Security @helpnetsecurity]

Photos: @BSidesZagreb 2024 - https://t.co/qHE0ynxe7B - @bojanz @infigois @advocatemack @GitGuardian @solardiz @k0st @Divertosecurity @mdecrevoisier @cocomelonckz @SrceHr #BSides #BSidesZagreb #cybersecurity #conferences #EU

[Binni Shah @binitamshah]

Bluetooth vulnerabilities in Android, Linux, macOS, iOS and Windows can be exploited to pair an emulated bluetooth keyboard and inject keystrokes without user confirmation : https://t.co/9nP22p69wW credits @marcnewlin

Slides : https://t.co/IjzxL1QStj

CVE's :

CVE-2024-0230
CVE-2023-45866
CVE-2024-21306

[Willem Melching @PD0WM]

New blog post is out! Extracting the SecOC keys used for securing the CAN Bus on the 2021+ RAV4 Prime. https://t.co/iWCiZumQCH

Research started all the way in 2022, but took many evenings of reverse engineering to get code execution.

PoC: https://t.co/ZCDH9EaJjm

[Binni Shah @binitamshah]

Researchers create AI worms that can spread from one system to another : https://t.co/5oMH3qx5cQ

ComPromptMized : Unleashing Zero-click Worms that Target GenAI-Powered Applications : https://t.co/5oMH3qx5cQ

Paper : https://t.co/g1t0h2EFGw credits @ben_nassi

[kost @k0st]

@jduck Covered all in presentation, but in short: CPU with Intel CET/AMD Shadow stack support, Linux kernel 6.6+, glibc 2.39+, ELF binary compiled with x86 feature: SHSTK (all 64 bit!). Yep, it needs recompilation, but some distros (like Ubuntu) already correctly compiled some binaries.

[kost @k0st]

Presented Shadow Stack in Linux userland backed up with Intel CET. Finally, full stack (hardware, kernel, glibc, gcc) is now available!

[Help Net Security @helpnetsecurity]

Here’s @k0st discussing Linux improvements in memory corruption based protections at @bsideszagreb

#bsides #bsideszagreb @Divertosecurity @SrceHr