Traxes

Found a nice Memory corruption during serialization/deserialization in a soft-TPM used by Hypervisors access.redhat.com/security/cve/c… 🥳

Todays santas beamer 💪🏻👍 learn about car protocols !

We investigated and found the error. It was connected to a not found tty of the dtls server. Which crashed when accepting connections. Due to dtls it started to send parts of the handshake. Basically docker -it worked but on -d it crashed. Fixed it -dt 😅. Sorry! Running again

💪🏻

@Insinuator My last blogpost on the Insinuator Platform :). Huge shoutout to @theevilbit !

New blog post: Forklift <=3.3.9 and <=3.4 Local Privilege Escalations on macOS (CVE-2020-15349/CVE-2020-27192) insinuator.net/2020/11/forkli…

@theevilbit Hey, might be related to that ;-). Could you ping me a private Message. Cheers

If you do 3rd party XPC exploitation *please* tell the vendors how to fix it properly. It's annoying to see "fixed" privhelpers, and then when I look at them they are still vulnerable. 😭 I think our job is also to educate these vendors how to write secure code.

In the last (5th) part of my XPC exploitation series I detail PID reuse attacks, why they are possible and how to solve them. The case study is again F-Secure SAFE. There are some recommended conference talks on the subject at the end. theevilbit.github.io/posts/secure_c…

Null-Page Allocation.

@kawaiiconNZ youtube.com/watch?v=WbIDOV… @dennismantz :-)

On the first day of Hack-mas my hecker gave to me~🎶 A whole bunch of uploaded Kawaiicon talks! 🧵

@ZetaTwo pwn.py, then wondering why I can’t import pwntools, then mv pwn.py solve.py, then one more minute of wondering why the hell I still cannot import pwntools, then rm pwn.pyc Repeat next CTF

Sourcetrail is now free and open-source! 🥳 The source code is available on GitHub: github.com/CoatiSoftware/… If this catches you by surprise, read our blog post on why we made this change and how we will continue: sourcetrail.com/blog/open_sour…

Ironically, DMCA notices indexes are way better than traditional search engines to find movies ☠️

@CaptnBanana @symeonp @fridadotre @dennismantz Whoops, we will fix it 😅

@symeonp @fridadotre @dennismantz @lod108 It crashed, frizzer just didn't recognize it as a crash (for me) :D

New Blog Post: In-Process Fuzzing With @fridadotre (also featuring Frizzer by @dennismantz and @lod108): bananamafia.dev/post/frida-fuz… #frida

30 minutes to our talk at @kawaiiconNZ (together with @lod108 ). We also released our frida-based fuzzer to GitHub: github.com/demantz/frizzer

@Enno_Insinuator Pull request for updates are always welcomed 😉

@lod108 #whowouldhavethought I'd use this gem myself one day😂

macOS Mojave Hardening Guide, by @lod108 github.com/ernw/hardening…

@osxreverser I currently enjoy SourceTrail. However, only works on C/C++ Java and partially Python. But the graphing is super nice!

@Earl553 Since you are working in my timezone... I win.. no matter what your illusion currently is.

@lod108 No, it‘s not! We can debate whether you are living in the future or where I am is considered the past. Nevertheless, here it‘s still Monday 😛

You know you‘ve reached some deep state of vacation relaxation if you have quite some hard time remembering which day of the week it is.