sysc4lls

[sysc4lls @sysc4lls]

@LiveOverflow In my opinion it's an n-day but maybe a new phrase needs to be invented? Actually hard to say

[sysc4lls @sysc4lls]

@jachashx The best researcher I know 🔥

[Jachash @jachashx]

The 40-year-old iOS kernel bug I discovered on the DEFCON 34 main stage.

My demo crashed on stage, and after investigating I traced it to a mistyped ++ that goes back to 1985.

Can you spot the bug?

Full post:

https://t.co/e3vuomAJ8r

[sysc4lls @sysc4lls]

@LiveOverflow What is your take on this?

[sysc4lls @sysc4lls]

@LiveOverflow First off that's awesome!

But I fell like it's very good in kernel/browser exploits since there are a lot of publicly disclosed exploits/pics and ctfs on these, there is a "by the book" approach for those targets, wonder how it will work on something else...

[sysc4lls @sysc4lls]

@iamgweej Get good

[sysc4lls @sysc4lls]

@roddux Love the quiz, it looks like an off-by-one, but you clearly oversimplified the pseudocode by a lot :)

[sysc4lls @sysc4lls]

@iamgweej Because chaos is fun

[0xor0ne @0xor0ne]

Excellent free book on compilers, linkers, JITs and assemblers for software security hardening

Low-Level Software Security for Compiler Developers:
https://t.co/7tIZD6zFwP

#cybersecurity #compilers

[Alon Ben Tsur @iamgweej]

Looking for a team to get back into the CTF scene, doing mostly pwn

[0xor0ne @0xor0ne]

Ghidralligator is a tool by @AirbusCyber to emulate Ghidra p-code for fuzzing with AFL++

Github Repo: https://t.co/RzvtuaGVFz

#ghidra #fuzzing #infosec

[Daniel DACA Cohen Hillel @0xDACA]

I found a cool vulnerability in @OpenZeppelin 's Merkle tree implementation and reported it to them on @immunefi 🌲🌲🌲

𝐋𝐞𝐭'𝐬 𝐝𝐢𝐯𝐞 𝐢𝐧! 🧵🪡

[ESET Research @ESETresearch]

#ESETResearch discovered that #LuckyMouse/#APT27 used a code-signing certificate belonging to VMPsoft, the developer of the VMProtect packer. The signed file is a loader for the SysUpdate backdoor (aka Soldier). We notified VMPSoft of this compromise 1/4
https://t.co/iCC221bwxw

[Saar Amar @AmarSaar]

A new blogpost is up! Let's take a look at kmem_guard_t in iOS 16 / macOS 13. Hope you'll find it interesting :) https://t.co/DXFmoM3eGB

Also on Mastodon: https://t.co/5NNynvpyT3

[reverseame @reverseame]

Stranger Strings: An exploitable flaw in SQLite https://t.co/UFYw5mCmSD

[reverseame @reverseame]

Exploit Development: No Code Execution? No Problem! Living The Age of VBS, HVCI, and Kernel CFG https://t.co/XmSFhqS9a5

[Tim McNamara @timClicks]

A new book on writing an operating system kernel has just been released. Found on r/osdev. https://t.co/bEiAzdJyea

[SSD Secure Disclosure @SecuriTeam_SSD]

🚨 A vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Manager Appliance and Cisco Email Security Appliance:
https://t.co/9OYRnZeWxk

[Petrus Viet @VietPetrus]

I have successfully reproduced CVE-2022-43781 causing RCE on Bitbucket server.

Ref: https://t.co/6zwUokvK0a

[Maurice Heumann @momo5502]

Finally, here is my writeup about reverse engineering and patching all 1219 integrity checks in Call of Duty: Black Ops 3

https://t.co/Czzu8aothx