nixhacker

Providing content about Low level security, Reversing and Intel/ARM Architecture stuff.

[nixhacker @nixhacker]

@MrT4ntr4 Thanks for informing.
Yes, it was a compromise happens because of leaked Admin API credentials to inject a ClickFix JavaScript payload. But the issue is rectified now and the blog is healthy.

[triagz @triagzlab]

triagz is officially out of beta!!

With a complete redesign and steady feature improvements, triagz has graduated from beta and is now live with v1.0.1.

Explore here for AI based connected endpoint research experince: https://t.co/LYXOOvl5pa

[triagz @triagzlab]

Triagz is upgraded. Now comes with better performance and response. Do check out for new AI based endpoint analysis platform!!
https://t.co/LYXOOvl5pa

[triagz @triagzlab]

Triagz Early Beta Release is now live!

Introducing the first platform that can transform your endpoint machine into Agentic with just a single click for comprehensive endpoint analysis and research.
We support all three platforms!

Check it out here: https://t.co/LYXOOvkxzC

[ö @r0keb]

Good Morning! Just published a blog post diving into Windows Kernel LFH exploitation in the latest Windows 24h2 build, Focusing on controlled allocations to achieve arbitrary read/write in the kernel.
https://t.co/ZAGDKCNZOp

[IDontCode @_xeroxz]

This is a great read for people interested in hypervisor development in both pre-boot and post-boot (Windows) environment, the source is public and written in rust as well. Great work @memn0ps 😀🙌

https://t.co/2grnJgj5hi
https://t.co/Ft32AKrx1P
https://t.co/orsBcoXaPP

[Nikolaj Schlej @NikolajSchlej]

The embargo (12:00 UTC 2025-06-10) is over, let's start a thread on Hydroph0bia (CVE-2025-4275), a trivial SecureBoot and FW updater signature bypass in almost any Insyde H2O-based UEFI firmware used since 2012 and still in use today.

English writeup: https://t.co/DYLj3oBDkg

[secret club @the_secret_club]

Hypervisors for Memory Introspection and Reverse Engineering by @memn0ps

https://t.co/yVi4yKE9ku

[Alex Plaskett @alexjplaskett]

kASLR Internals and Evolution by @r0keb

https://t.co/KmS1C1N08t

[Alex Plaskett @alexjplaskett]

Writing a Windows ARM64 Debugger for Reverse Engineering - KoiDbg by @keowu

https://t.co/qDyhOebxA3

[sam4k @sam4k1]

with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓

https://t.co/dqW9eMJkVI

[Alex Plaskett @alexjplaskett]

Two new side-channel attacks against Apple CPUs that can leak sensitive data from the processor's memory

SLAP (Speculation Attacks via Load Address Prediction) and FLOP (False Load Output Predictions)

https://t.co/8OxbdIy99X

[Alex Plaskett @alexjplaskett]

KernelSnitch: Side-Channel Attacks on Kernel Data Structures

https://t.co/M53ZyYyJ9I

[Anderson Nascimento @andersonc0d3]

Uncovering New Classes of Kernel Vulnerabilities

https://t.co/turSCVslbX

[Andrey Konovalov @andreyknvl]

Nice paper! 🔥 No fix implemented, AFAIK.

Like the general idea that leaking the address of an exploit-controlled object of one type effectively means leaking the address of an object of another chosen type, as we can put the latter object onto the same page via cross-cache.

[Alex Plaskett @alexjplaskett]

Reverse engineering U-Boot for fun and profit by zeno

https://t.co/Nc3ilAsfJ1

[cts🌸 @gf_256]

New attack on x86 secure enclaves, specifically AMD SEV this time. SEV is AMD's answer to Intel TDXs.

Basically tricking the CPU into thinking the DRAM is a different size, causing physical address aliasing, which can then be exploited

[PT SWARM @ptswarm]

🆕 Check out our latest publication on DMA attacks via SD cards! 💾

The article was written by our researcher Gesser.

➡️ https://t.co/I4ujGaggJ2

[0xor0ne @0xor0ne]

Resources on Satellite hacking CTFs

Satellite Hacking Demystified: https://t.co/hGDo9jKO7W
Hack-a-sat writeups: https://t.co/PIkGXuAKSN
Hack-a-sat players corner: https://t.co/aQwVw117nU

#cybersecurity #ctf

[sixtyvividtails @sixtyvividtails]

Outrageous technique: barely legal use of x86 CPU instruction enables you to catch and 𝗰𝗮𝗻𝗰𝗲𝗹 impeding pagefault before it actually happens.

③: catch PAGE_GUARD or invalid access
⓪: do previously illegal reads at high IRQL, safely

#vpgatherqq #vpscatterqq scatter/gather