Next year @intel_owl will participate again for the Google Summer of Code!
Don't know what it is and how to get involved? Check the video below!
#gsoc#opensource
https://t.co/n3HUErlBAV
I have no idea if anyone from Twitter follows me - probably not, because why would they. Anyhow, I have something to share. One of the interesting presentations I've seen at google was titled 'Don't be a hero'.
@richinseattle@NSA_CSDirector@RGB_Lights I don't think you are the target audience. I bet the goal is to try to appear fresh and cool so they can hire more people fresh out of college for their grind.
Come join a great team of students, faculty, and researchers at an amazing location in the center of Europe and hack some cool stuff! 🐝🐝🐝 Group page: https://t.co/oChKJlk0QJ
SharedMemUtils - A simple tool to automatically find vulnerabilities in shared memory objects (commonly used for IPC in Windows services)
This tool immediately uncovered potential exploitation routes in both Nvidia and Dell Audio services on my system.
https://t.co/fOBs1FuSzB
Awesome slides for a very technical topic and by far the best explanation I've seen of how the Linux eBPF verifier internals work. Thanks for sharing @shunghsiyu
KMSAN (https://t.co/2hiZXNqZjU) got merged into Linus' tree today: https://t.co/cHVKX6RI5O, fingers crossed to see it in v6.1
KMSAN helped find 300+ bugs in various kernel subsystems, and will certainly help find more.
linux-syscall-support is a very useful single-header C library that I don't see mentioned often: https://t.co/nnIUlrCOta
You can use it to make direct syscalls without a libc - useful for writing compact exploits or shellcode, without resorting to hand-written assembly.
"Symbolic Execution the Swiss-Knife of the Reverse
Engineer Toolbox", a talk by @RobinDavid1 presented at the @kleesymex 2022 workshop. Triton under the hood ❤️. Looks like there is also a teasing about a new DSE fuzzer... 👀
https://t.co/Uv71cAVLIA
Always a great read:
https://t.co/LjZsWJqinZ
“We took a locked down FDE laptop, sniffed the BitLocker decryption key coming out of the TPM, backdoored a virtualized image, and used its VPN auto-connect feature to attack the internal corporate network.”
Curious about exploiting VMs or memory bugs in a safe language? Read my new blog post, where I attack Firecracker, AWS' VMM written in Rust. Learn about the various layers of virtualization + the attack surface, and how design decisions impact security.
https://t.co/FNN7JjeRce
New blog post is live! In which I download 4 TB of Python packages containing native x86-64 libraries and see how many of them use -ffast-math, potentially altering floating point behavior in any program unlucky enough to load them! https://t.co/Klu5ErZLy2
A list of recent conference materials:
BlackHat - no videos, but slides
https://t.co/IKrAVA0bBC
BSidesLV
https://t.co/A03Mp6tDMl
Defcon
https://t.co/sAT1cSa8fd
Troopers
https://t.co/YUfKqxCaSQ
ARE41
https://t.co/UN977kxPSv
SANS ransomware summit
https://t.co/LKejsxQwYG