Damian Pfammatter

First two unauthenticated RCE CVEs published - Discovered with the help of our #Binja plugin #Mole! 🔗 Advisory: certvde.com/en/advisories/… 🔗 Mole: github.com/cyber-defence-… More vulnerabilities have been reported - stay tuned for upcoming advisories.

Static pointer tracking is tricky. Just shipped some improvements to my #BinaryNinja plugin #Mole: it now tracks array and struct members more precisely. An example on how Mole does this: #array-indexing" target="_blank" rel="nofollow noopener">github.com/cyber-defence-… Binja's multiple ILs make precise analysis so much more powerful!

Talk is ready - taking off to #BHEU @BlackHatEvents!

#Morion has been accepted for @BlackHatEvents #BHEU and will be presented at #BlackHatArsenal this December in London! #morion---a-tool-for-experimenting-with-symbolic-execution-on-real-world-binaries-41954" target="_blank" rel="nofollow noopener">blackhat.com/eu-24/arsenal/…

I've written a detailed showcase to highlight some of the tool's features (and current limitations). The showcase illustrates how the tool can, for example, help assess if a bug is exploitable and if so, assist in crafting a functional exploit: github.com/cyber-defence-…

A while back, I wanted to learn about @qb_triton and symbolic execution in general, and to research its challenges when it comes to real-world binaries. What began with a few simple scripts evolved into PoC tool called Morion, which I've just released. #symbex #libtriton #morion

@HatforceSec @cydcampus @IEEE The paper should soon be listed on the conference website: ieeeeurosp.github.io. Give me a DM if you want me to share it directly.

@cydcampus @IEEE Exciting, where can I find the paper? I am curious to understand the difference(s) to arxiv.org/abs/1708.06525

If you are attending #EuroSP22 and are interrested in our work or the @cydcampus in general, let us know. We are happy to discuss!

How to setup network monitoring for your home IP in 4 easy steps using the Shodan CLI: asciinema.org/a/231048

Great audience at my talk and a nice @swisscyberstorm coference in general. Leaving with plenty of new ideas to extend my research...

Compass Security Blog: Hidden inbox rules in Microsoft Exchange… or how to secretly steal your messages. Topic presented at this year’s @swisscyberstorm. #DFIR blog.compass-security.com/2018/09/hidden…