I published the slides of the presentation I gave @BlueHatIL and @offensive_con about Attacking Edge through the JIT compiler. I also contains exploit code for CVE-2018-8266 https://t.co/01ZoFkmBBq
My #pwn2own exploit chain from this year, essentially 3 logic bugs to go from Safari to kernel on macOS up to 10.13.3, is now open source: https://t.co/AXhKn3rDxF. The README also links to a few slide decks which contain some more background information :)
Today we have a short new blog post about CVE-2018-4358, an infoleak bug in Safari found by @bkth_@5aelo and @_niklasb that got patched by Apple in their last updates: https://t.co/dGqZJG9tjH
First #Hack2win eXtreme winners, @_niklasb@bkth_@5aelo, 3 categories: Firefox RCE, Firefox InfoLeak and Chrome RCE, beautifully done, for a total prize of 170,000$USD. Still have 330,000$USD to give out to anyone that can show their skills - disclosure soon via @SecuriTeam_SSD
Here are the slides from my #BlackHatUSA talk about just-in-time compilers for JavaScript and the @webkit bug I used as part of my Pwn2Own chain this year =) https://t.co/RpASPLSfr1
New blog post: Fuzzing the CS:GO map file loader with AFL in QEMU mode. Includes full fuzzing harness + triaging tools to reproduce. Will still find heap overflows, because Valve says these are not security issues :> So get yourself some 0days now! https://t.co/MDSQrvt1UZ
I added a PKGBUILD to get a full debug build of the latest VirtualBox version for Arch Linux, with the 3D security fixes from July reverted: https://t.co/0XR5MCmasB
I published a small Python Linux library for experimenting with HGCM and VBoxSharedCrOpenGL (3D accel) from a VirtualBox guest. Includes a full exploit for CVE-2018-30{55,85} demonstrating some useful heap exploitation techniques for the 3D component https://t.co/xtXuqN5qGk