λambdhack

CTF player | Member of @teamfakenews | Goodies hunter | I use arch btw

[Tom Dörr @tom_doerr]

Tracks users with favicons, even in incognito mode

[Sterling Crispin 🕊️ @sterlingcrispin]

This is one of the craziest ideas I've ever seen. He converted a drawing of a bird into a spectrogram (PNG -> Soundwave) then played it to a Starling who sung it back reproducing the PNG.

Using the birds brain as a hard drive with 2mbps read write speed.
https://t.co/f5gEyyK1MH

[TrendAI Zero Day Initiative @thezdi]

Extracting Embedded MultiMediaCard (eMMC) contents in-system. ZDI researcher Dmitry Janushkevich details how to interact with an eMMC chip and notes some pitfalls you may encounter on the way. https://t.co/S4vupgDL5V

[Denis Laskov 🇮🇱 @it4sec]

Dump the firmware and extract the car's CAN matrix: message IDs, data structure, keys(?). A new attack on automotive ECUs. 🚗🔎👨‍💻🗺️

More details:
LinkedIn: https://t.co/QvKvgewo55
Substack: https://t.co/DUIXF3rNVx

[hextree.io @hextreeio]

Last year, @Raspberry_Pi hired us to test the security of the RP2350 - and using electro-magnetic fault-injection we were able to successfully bypass the OTP security measures!

This allowed us to read and modify the OTP locks, essentially bypassing the RP2350 secure-boot.

[Phil BARRETT @Phil_BARR3TT]

https://t.co/BTpjS4e9DF
A very interesting article on a smart approach to understand what have been altered during a crowbar glitching fault injection ⚡

[tmp.0ut @tmpout]

tmp.0ut Volume 4 is happening! Our call for papers is now open, and we're excited to see what you've been working on 👀 read the full announcement here: https://t.co/95d9RLYzZV

[Alex Plaskett @alexjplaskett]

✍️ Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation

https://t.co/zKhWw7DOY2

[DistrictCon @DistrictCon]

🚨The Junkyard Call For Bugs is Open! 🚨We want you to bring your most impactful, creative, or most meme-y bugs in end-of-life (EOL) products, and demonstrate them live on stage! Winners get 💰prize money 💰
https://t.co/xueuL1Xm72

[GreHack @GrehackConf]

Folks, great news:

We're excited to announce that #GreHack24 tickets will be available Saturday, September 21 at 10AM!

And from tomorrow, we'll be announcing our AWESOME speakers 🤩

[Alex Plaskett @alexjplaskett]

✍️ Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation

https://t.co/zKhWw7Dh8u

[sha1lan @sha1lan]

Why exploits prefer memory corruption

Thanks to @halvarflake and @chompie1337!

https://t.co/Z9ZtLlsYOw

[Denis Laskov 🇮🇱 @it4sec]

Hacking EV Charger: ChargePoint Home Flex can be exploited via Bluetooth..

https://t.co/C8ZMnAVQSX

[atc1441 @atc1441]

The NXP LPC2388 Read Protection fully bypassed 🥳

Video blog📽: https://t.co/Q1zN3IfYW2

[bearstech @bearstech]

Le guide ultime (autoproclamé) de la performance réseau sur Linux !
-> https://t.co/dxmUacYK5L

[Agence nationale des fréquences @anfr]

📣🕵️: “Aventure citadine : veillez à être bien câblé !”

Pour cette #EnquêteANFR un opérateur mobile a subi un #brouillage sur la bande de #fréquences 800 MHZ, amenant les agents de l'ANFR sur le toit de la Gare de Lyon ! 🚅

➕https://t.co/JR0eMhJiBK

#FréquenceDeDemain

[atc1441 @atc1441]

DOOM on a Toothbrush? Sure!

[Alex Plaskett @alexjplaskett]

✍️ TIKTAG: Breaking ARM’s Memory Tagging Extension with Speculative Execution

https://t.co/6qwlcRsTOC

[bearstech @bearstech]

Comment échapper à l'interdiction des routeurs WiFi avec OpenWrt pour masquer les adresses MAC, en réduisant la puissance du signal et en choisissant des SSID discrets.
-> https://t.co/uEKAIqD34n

[Ruikai Peng @ruikai]

This is a blog about how I exploited Tenda Ac8's 0day remote overflow into RCE via mipsel ROPing with multi-regs.

It includes experience that I learn from 2 weeks of gdb-multiarch-ing, mipsrop-ing, QEMU-ing, IDA-ing, ifconfig-ing from scratch to CVE.

https://t.co/3BSnmMwAPj