Thomas Barabosch

Hunting threats, reversing binaries & tinkering with kernels.

[Thomas Barabosch @tbarabosch]

Nice track record!

[Zixuan Li @ZixuanLi_]

GLM-5.3 has helped defend 389 open-source projects, with 4,249 potential vulnerabilities found so far.

OpenVuln is still running. The service remains free, and findings go privately to maintainers.
https://t.co/wqRE3zC2b5

[Thomas Barabosch @tbarabosch]

One entropy score can hide the interesting parts.

Map it across a binary to spot abrupt changes and focus your analysis.

https://t.co/aVGiteiBpi

#MalwareAnalysis

[Florian Hansemann @CyberWarship]

''GDID: The Windows Global Device Identifier''

#infosec #pentest #redteam #blueteam
https://t.co/iuJhxxBXZL

[Bert-Jan 🛡�� @BertJanCyber]

Interesting repo to check out with some #KQL and #SPL hunting queries.

https://t.co/kSZCup0UeZ

[adafruit industries @adafruit]

The newest ESP32 can actually run Linux, and it's getting uncomfortably close to a Raspberry Pi

https://t.co/mD7vaqLXGt

[Thomas Barabosch @tbarabosch]

A PE file can hide useful data after its last mapped section.

That trailing overlay may contain configs, payloads or noise. Stripping it blindly can destroy valuable data for analysis.

https://t.co/FmwxYnKtHC

#ReverseEngineering #Malware

[Thomas Barabosch @tbarabosch]

NetBSD in Apple’s container tool? It works.

OCI layers → FFS disk → Virtualization.framework → NetBSD 11 → process execution.

https://t.co/oQ9e7wQx6r

#NetBSD #macOS

[watchTowr @watchtowrcyber]

CVE-2026-88771 - the loaded Citrix footgun went off again, and the screaming noise is back in our ear.

You knew it was coming - enjoy the latest watchTowr Labs blogpost.

https://t.co/cKN1oqLwpK

[Thomas Barabosch @tbarabosch]

Interesting take on the next endpoint fight. Everyone is buying into agent security right now and the hard part is that an agent abusing your credentials looks exactly like an agent doing its job.

https://t.co/WyhSuF4E85

#infosec #EDR #AIsecurity

[Thomas Barabosch @tbarabosch]

A patch shows more than a fix: its deleted lines can become a search signature for the same bug elsewhere.

That idea became HistRepo: mine BSD fixes, then hunt sibling trees for unfixed code.

https://t.co/iZLZYMvbhr

#BSD #CyberSecurity

[Thomas Barabosch @tbarabosch]

Most fuzzers throw strange data at programs.

What happens if you throw strange instructions at the CPU instead?

I revisited an old “trap fuzzing” experiment that found real bugs in OpenBSD and VirtualBox.

https://t.co/Nxq3Oxo4CH

#Fuzzing #CyberSecurity