Xappy

Security Researcher 🩺
Into Windows(.NET)/iOS/protocols reversing and forensics.

[Xappy @theXappy]

I figured out a generic way to generate those polyglots!
Introducing: bppb!
https://t.co/OiuVkMhSMK
This PoC takes 2 files, a bplist and a protobuf, and merges them into one unholy abomination.
#bplist #protobuf #polyglot #dfir #digitalforensics

[Xappy @theXappy]

Annoyingly, I created a bplist-protobuf polyglot.
This one is a valid protobuf containing 2 LengthValues in an array.
As a bplist, it's a dictionary with 2 Key-Value-Pairs.

Hex here: https://t.co/dQsTi7esTF
#DFIR #MobileForensics #DigitalForensics

[Xappy @theXappy]

@zeroxjf Woah
I'd love to see how you made this one happen

[Xappy @theXappy]

Happy tokens apocalypse to those who celebrate ����

[_SiCk @encrypted_past]

Vendors++
Added:
GL.iNet
Hikvision
Dahua

Not all of them encrypt, but nice to have.
https://t.co/eMD7qL6Nhp

[Dimitri Os @Ch0pin]

IRIS (Intent Runtime Inspection System) is my attempt at building a Burp Suite for Android intents :) . Give it a spin and let me know what breaks, what’s missing, and what you’d like to see next: https://t.co/u5sUlvHBpB
Demo here: https://t.co/IdAZDIq3qU

[Xappy @theXappy]

@zeroxjf Cool, I read some of it
We're lucky the Icon Manager class is a singleton ("sharedInstance"). Finding a random instance without such static method can be a headache haha

[Xappy @theXappy]

@zeroxjf Oh nice
Are you doing that by hooking methods?
I've tinkered with Lara's reimpl of RemoteCall but didn't figure out if hooking is possible yet

[Xappy @theXappy]

Playing with the Lara semi-jailbreak

[Xappy @theXappy]

@marspiterr In-the-wild @binarygolf challange

[eleven red pandas @bytecodevm]

The article demonstrates how to bypass the Winsock layer by communicating directly with the Windows AFD driver using Native API calls. It explains how socket operations can be replicated via IOCTLs and how this reduces reliance on standard networking APIs.
https://t.co/kSUGhsHcMg

[Xappy @theXappy]

@hackerfantastic I'm 100% sure they have the statistics and the percentage of theses people is too low for them to care

[Xappy @theXappy]

This repo by @atc1441 was helpful
https://t.co/Pcd5AxMBpe

[Xappy @theXappy]

Finally got my "A9 Pro" (AirPods knockoff) to spit out debug output over UART.

I opened up the case but eventually found out the UART pin is accessible via USB-C's A5/B5 pin.
Oh well.

[Xappy @theXappy]

@mj0011sec Why is telegram specifically mentioned? What's the context?

[Xappy @theXappy]

Beautiful view for this Saturday

[8kSec @8kSec]

💡Understand how ROP can be used to bypass security defenses and execute code on ARM64 devices in Part 3 of our ARM64 Reversing and Exploitation Series: https://t.co/A798O5TgIr
📥Want to strengthen your ARM64 exploitation skills? Check out our free ARM64 challenges: https://t.co/ViqBMwNvgY
#Reversing #ReturnOrientedProgramming #CyberSecurity

[diversenok @diversenok_zero]

I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🪲

Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA:
https://t.co/mSWAolfrFt

[Xappy @theXappy]

@ghidraninja AI is onto us we're cooked

[Xappy @theXappy]

Hoping for a WhatsApp 0-click RCE so I can retract its demo myself 🤞

[faulty *ptrrr @0x_shaq]

if you retweet this you'll find a zero day in 24 hours
(trust me this spell works)