Specter

My @dayzerosec co-host zi and I are giving our 1st training @ hardwear.io with a focus on attacking security hypervisors! Trainings are something we've wanted to do for a while. Take a look and share to those who would be interested :) hardwear.io/usa-2025/train…

Method we used (>5 years ago, now) on ps5 to fiddle with mp4 and hv memory: github.com/fail0verflow/p… hope it helps for linux!

Incredible talk on hacking the Xbox One security processor youtube.com/watch?v=FTFn4U…

Played @tihmstar's custom beatsaber song, 10/10 would play again

RIP, my PlayStation exploit died. gist.github.com/TheOfficialFlo… Works upto PS4 13.00 and PS5 12.00. Patched on PS4 13.02 and PS5 12.02.

@Spillfreaks I might be able to get some compensation but even if I can, it'll probably be impossible to get the proper value for them since these models are harder to acquire and pricier than MSRP.

@SpecterDev how is it not covered by home insurance?

Some people already know this, but thought I'd mention here too... unfortunately basically all of my low fw PS5s got stolen recently, so I'm not sure what my future in console research will look like. Replacing this stuff might be too be difficult & expensive to be worth it :(

We have a special episode this week, where we interview @JohnCarse of @getsquarex. We talk about John's industry experience, history of browser security, and the work SquareX is doing on detecting and mitigating browser-based attacks. Check it out: youtube.com/watch?v=GtFpxB…

@_AlAzif Which is extra dumb considering its a proprietary syscall so any public models wouldn't have any hope of having any information about it

Do not trust some of the "POC"s being put out today for the disclosure today. Haven't seen a real one that isn't AI generated nonsense yet.

My @dayzerosec co-host zi and I are giving our 1st training @ hardwear.io with a focus on attacking security hypervisors! Trainings are something we've wanted to do for a while. Take a look and share to those who would be interested :) hardwear.io/usa-2025/train…

We have a training by @SpecterDev & Zi on Attacking Hypervisors From KVM to Mobile Security Platforms hardwear.io/usa-2025/train…

I've published a write-up on reversing and analyzing Samsung's H-Arx hypervisor architecture for Exynos devices, which has had a lot of changes in recent years and pretty interesting design. Hope you all enjoy :) dayzerosec.com/blog/2025/03/0…

Recon Training 23-26 June 2025: KVM to Mobile Security Platforms - Attacking Hypervisors with @SpecterDev and zi from @dayzerosec (4 days) For more details recon.cx/2025/trainingF…

github.com/google/securit… Our newest research project is finally public! We can load malicious microcode on Zen1-Zen4 CPUs!

@AndrewOliveau Wild how it went from one of my favorite products that I recommended all the time to what it is now. I'd still say it's one of the better desktop virtualization solutions right now but hard to say if it'll be like that for long with how its going

I will never forgive Broadcom for ruining VMware.

RE: byepervisor do people care enough about not wanting to use rest mode and resume to switch the primary exploit for byepervisor to the jump table one? its higher maintenance and possibly slightly less stable but would be slightly more convenient to run I guess

@MODDED_WARFARE Ah, issue with stuff being slow might just be because I left too much logging code in hooks😅 I'll probably release a better version soon that should hopefully fix that.

New video: Initial PS5 Byepervisor setup guide for 1.x/2.x firmware: youtu.be/3v5IjHVKhUg

Inside console security: How innovations shape future hardware protection - helpnetsecurity.com/2024/10/29/gam… - @PlayStation @hardwear_io #HardwareSecurity #hw_ioNL2024 #PlayStation #gaming #CyberSecurity #netsec #security #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews

Slides github.com/PS5Dev/Byeperv…

I've published the repo for Byepervisor (we love named vulns out here). Contains exploit implementation for two PS5 hypervisor bugs for 2.xx and lower. Slides from the talk + vod should hopefully be published soon. github.com/PS5Dev/Byeperv…