davii

Cracking the Pixel 8: Exploiting the Undocumented DSP to Bypass MTE - @Peterpan980927 @st424204 from @starlabs_sg hitcon.org/2025/slides/b7…

Updated #PEsieve / #HollowsHunter / #MalUnpack: github.com/hasherezade/pe… / github.com/hasherezade/ho… / github.com/hasherezade/ma… - check them out 💙

It's peak summer and it's time to put on your sunglasses 😎and swimsuit 🩲👙... Unless... idekCTF IS HAPPENING IN 3 DAYS ⏰⏰⏰ 1st place wins $1,500🤑, idek Hoodies and an invitation to @malta_ctf's Finals in Valletta, Malta September 12-15 Link below ⬇️

I was messing around with symbol resolution in ELF and came up with an obfuscation technique on abusing symbol resolution in ELF programs that is able to trick tools (i.e. Ghidra, IDA, GDB) into showing the wrong library function calls. blog.elmo.sg/posts/breaking…

The new "Fuzzing 1001: Introductory white-box fuzzing with AFL++" by Francesco Pollicino was recently released at ost2.fyi/Fuzz1001. We've also released updated Learning Paths (LPs) that show how the class fits in to the Vulnerabilities & Secure Development LPs: ost2.fyi/Learning-Paths…

@Pedro_f_Moura cobal sexta ¿

NÃO TEMOS MEDO! VITÓRIA DO CAMPEÃO DA AMÉRICA! 🔥🌎 BOTAFOGO SE AGIGANTA NO ROSE BOWL E VENCE O PSG PELA COPA DO MUNDO DE CLUBES DA FIFA! O CLUBE MAIS TRADICIONAL HONRA A SUA HISTÓRIA, O BRASIL, O CONTINENTE E O ESPORTE MAIS APAIXONANTE DO PLANETA! VAAAAAAAAAAAAMOS, GLORIOOOOOOOOOSO! #VAMOSBOTAFOGO #FIFACWC #TAKEITTOTHEWORLD

We released new Pwndbg: github.com/pwndbg/pwndbg/… ! It brings new kernel commands for dumping heap allocator info, display of not taken branches (X marker) in disasm, better disasm for ARM/MIPS/LoongArch64, initial s390x support & more! Sponsor us at github.com/sponsors/pwndbg !

@cryptodavidw maybe you are looking for something like this? blog.trailofbits.com/2019/05/31/fuz…

a while back I was reading about whitebox fuzzing and how fuzzers would use SAT solvers to unstuck themselves if needed. Have there been more work done to make these practical? Are there any interesting blogposts of people actually finding bugs with these advanced fuzzers?

with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓 sam4k.com/page-table-ker…

Brazil made history last weekend, and of course, ELT was a part of it! Thanks @GaneshICMC , @boitatech , @gris_ufrj and #hawksec_unifei for partnership! We got 17th place, the best brazilian result, at #DEFCONCTF Quals as "pwn de queijo"! Thanks @hackaflag for hosting us!

@a13xp0p0v looks cool! will the talk be posted on youtube?

Slides of my talk at #Zer0Con2025! ⚡️ Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits ⚡️ I presented the kernel-hack-drill open-source project and showed how it helped me to exploit CVE-2024-50264 in the Linux kernel. Enjoy! a13xp0p0v.github.io/img/Alexander_…

@iamgweej why

I am quite displeased with the behavior of `rcu_free`

@pwningsystems @roddux wouldn't it in the end still prevent a possible "mitigation bypass"? I mean yeah all the other techniques that are actually being used still works but idk

@roddux @zeezie23 That’s so openbsd of them lol, I doubt that works

is it really that impractical to disable smap/smep by tweaking the cr4 register with some good gadgets?

what the actual fuck

@v4bel this is neat! I took a look around and found the inet_create() on the AF_INET socket. it looks a little bit easier to trigger (?)

Did you know that in Upstream, the conventional “overwriting modprobe_path” technique doesn’t work anymore? So, I developed a new technique that generally triggers modprobe_path. It's a simple idea—nothing fancy, but pretty useful 🙃

@pkkitagawa oops

@szakirasz @notSIug hiwh2iOIhdjaoOkJBajsijzjakKKwjbwkzoHskwojskdo :3

I've hired these crows to stare at you