Jonathan Brossard

Debugging ARM binaries on x86_64 without a VM thanks to qemu user mode emulation + wsh github.com/endrazine/wcc/… #witchcraft #defcon

@richinseattle @bsdaemon @pinkflawd I hope to see you all soon cool cats 🐈

@endrazine Yoooo I was hanging with @bsdaemon and @pinkflawd last week and we were talking about you and old times and Hakito/NSC etc. great to hear from you my man! I heard you are back in EU, I’ll ping you off public comms to catch up after I fly home tomorrow!

Anyone who has seen me in the last 10 years has seen some form of “long hair don’t care”. Well I decided to get it chopped so if you are looking for me at a con this is the new ‘do. I also moved from Seattle so might be rebranding over all, I’ll keep you posted!

I thought (computer) Gods were not supposed to die ? 😥

@marcwrogers @solardiz @troyhunt @briankrebs @schneierblog @SecurityBSides @SwiftOnSecurity @enisa_eu @NIST @CISAgov @NISTcyber @Microsoft @Google @riskybusiness @mudge @taviso @mattblaze @ICANN Are you aware of this situation ? Any help or guidance you may provide ?

@endrazine @solardiz @troyhunt @briankrebs @schneierblog @SecurityBSides @SwiftOnSecurity @enisa_eu @NIST @CISAgov @NISTcyber @Microsoft @Google @riskybusiness @mudge @taviso @mattblaze Has anyone flagged this with ICANN?

Symantec killed Bugtraq in 2020 and let the domain lapse. Now it's squatted for $175k. The NVD has 120,000+ broken links pointing there. The security community's memory is being held hostage. Let's buy it back ! Please donate/spread/tag/RT 🙏 gofund.me/69b07ba83

@solardiz @troyhunt @briankrebs @schneierblog @SecurityBSides @SwiftOnSecurity @enisa_eu @NIST @CISAgov @NISTcyber @Microsoft @Google @riskybusiness @mudge @taviso @mattblaze @marcwrogers !

@solardiz @troyhunt @briankrebs @schneierblog @SecurityBSides @SwiftOnSecurity @enisa_eu @NIST @CISAgov @NISTcyber @Microsoft @Google @riskybusiness @mudge @taviso @mattblaze We need your help 🙏

✍️ Introduction to Procedural Debugging through Binary Libification by @endrazine usenix.org/system/files/w…

📢 The WOOT 2024 presentations are now all available on YouTube: youtube.com/playlist?list=… Enjoy!

Happening now: Jonathan Brossard is presenting an innovative process of generating partial proofs of vulnerabilities from SBOM at #IEEESecDev 2024!

And of course a "very clever trick" : user agents when downloading over HTTP 😂😂😂😂😂

This whole hype around "perfctl" is really funny. This supposedly advaced malware uses LD_PRELOAD, xor encryption and supposedly "20k exploits" (which is 10x the number of exploits in metasploit, and not remotely plausible). In the end a "20K directory traversal fuzzing list" 🤣

@EricPAUGET1 @DavidSimplot @FrenchTechCdA @SophiaAntip0lis @LeVillagebyCAAP @PetitesAffiches @Tribuca @patrickhetzel Merci de votre visite, bel échange autour des valeurs de l'entrepreneuriat et de la vivacité de Sophia Antipolis 👍

💡[LES INNOVATIONS DE LA 7e] C’est le retour de notre chronique tournée vers les innovations de notre technopole Sophia-Antipolis avec @DavidSimplot. Et si cette rentrée est placée sous le signe de la restauration de la sécurité, quoi de mieux que de se retrouver au sein @moabi_com, une start-up familiale experte en cyber-sécurité en place depuis 2022 et fondée par Jean-Michel Brossard et Jonathan Brossard, CEO et CTO de l’entreprise. En effet leur plateforme a pour objectif d’aider les autres entreprises à établir les failles de leurs logiciels afin de les aider à les sécuriser. Un service essentiel et proposé par seulement 3 entreprises dans le monde ! 💻🔒 #Innovations #SophiaAntipolis

I don't remember a time when I wasn't a hacker.

Warm thanks to the organizers and attendees from @wootsecurity ! Had a blast this year. Woot ! #woot2024

Wrapping up the first session: @endrazine giving an Introduction to Procedural Debugging through Binary Libification

I'm thrilled to be presenting new Academic research at the amazing @wootsecurity conference next Monday, representing both @LeCnam and @moabi_com Read more at: usenix.org/conference/woo…

With less than a week left, here's a brief summary on what to expect from WOOT: - 18 amazing talks on offensive security (single track) 🤩 - a galvanizing keynote by @perribus on the relationship between white hat hackers and AI 😍 - a room filled with inspiring people 🤯

@nudehaberdasher @mdowd Mark Dowd 2.0 qualys.com/2024/07/01/cve…

@nudehaberdasher @mdowd Mark Dowd : Primus inter Pares 🏴‍☠️

I won't normally spend 1hr listening to a podcast, but I've made an exception for @mdowd: securitycryptographywhatever.com/2024/06/24/mdo…