Reverse Engineering
Joined November 2015
- Tweets2.8K
- Following224
- Followers1.2K
- Likes2.1K
Charles Muiruri retweeted
For those who have been asking about the @AfricaHackon T-shirts and Hoodies, do get a pre-order via the link below.
Those coming for the event physically can get it on Saturday. Others who will get delivered later.
bit.ly/AHmerchpreorder
Charles Muiruri retweeted
youtu.be/t4SHqKyDmH8
📶 My talk from #defcon31 is up! If you missed it, or like to keep it around for reference have a look-see. 👀
Charles Muiruri retweeted
Hello network, I'm currently looking for a junior position as a Penetration Tester or Digital Forensics Expert. If you know of any companies seeking candidates in these roles, please inbox me and I am willing to relocate. Your support is greatly appreciated!
Thank you 🙂
Charles Muiruri retweeted
Did some work on github.com/acama/xrop which now works on macos (apple silicon)! I'm not a very good developer so pull requests are always welcome.
Charles Muiruri retweeted
I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.
Google fixed the issue in the November 5, 2022 security patch. Update your devices!
bugs.xdavidhu.me/google/2022…
Charles Muiruri retweeted
My latest blog post is up @TrenchantARC describing my Pwn2Own Miami 2022 winning entry. Thanks @thezdi !
trenchant.io/two-lines-of-js…
Charles Muiruri retweeted
My team at Trenchant (formerly Azimuth) is hiring! If you’re a baseband or cellular researcher and want to work alongside some of the most talented hackers in the industry, send me a DM.
Charles Muiruri retweeted
I just released the source code of Paracosme: a zero-click remote memory corruption exploit I demonstrated at Pwn2Own 2022 Miami 🐛🐜🪲
github.com/0vercl0k/paracosm…
Charles Muiruri retweeted
I am terribly saddened by the unexpected passing of Nicolas Brito @sipdbg aka modem at a young age. He was a discrete but extremely respected figure of the infosec underground who pioneered new heap exploitation techniques, and more recently kernel exploitation. R.I.P. my friend.
Charles Muiruri retweeted
👏Our researchers @DamianoMelotti @max_r_b @doegox just finished their talk about reversing Google's Titan-M chip.
Partial chip pinout, Ghidra loader, an open source API client, a fuzzer, 1st ever code exec exploit, slides & white paper now available here
github.com/quarkslab/titanm
Charles Muiruri retweeted
Check out @bdmcbri ‘s blog post about his winning pwn2own hack of Parallels earlier this year: trenchant.io/pwn2own-2021-pa…
Charles Muiruri retweeted
Yet another Linux kernel exploitation write-up!
CVE-2021-22555: Turning \x00\x00 into 10000$
google.github.io/security-re…
Charles Muiruri retweeted
Just Posted: A Three Part Deep Dive on JavaScriptCore's DFG. Perfect for those learning to exploit JIT bugs.
zon8.re/posts/jsc-part3-the-…
zon8.re/posts/jsc-part4-the-…
zon8.re/posts/jsc-part5-the-…
Charles Muiruri retweeted
Our interview from the Exploit Hall of Fame project, with Mark Dowd, on the PWN2OWN 2021 stream. What a day! Topped $1mil of awards! Exchange, Zoom silent no crash RCE (b00m), multi-browser exploits... youtu.be/dTL5y4Ib5Y8
Charles Muiruri retweeted
Finding vulnerabilities in JavaScriptCore great, but finding vulnerabilities in JavaScriptCore with #CodeQL is even better!
My latest blog post is finally out and I hope you'll enjoy it as much as I enjoyed writing it.
cyberark.com/resources/threa…
Charles Muiruri retweeted
New blog post: Another approach to portable Javascript Spectre exploitation
dougallj.wordpress.com/2021/…
Charles Muiruri retweeted
I published my research on the Apple M1 CPU microarchitectures (Firestorm and Icestorm), with instruction tables describing throughput, latency, and uops for most instructions, and (an insane number of) detailed experiments and measurements.
dougallj.github.io/applecpu/…
Charles Muiruri retweeted
We've spotted an interesting feature in the Samsung DSP driver on Galaxy S20/S21: untrusted Android apps can load custom firmware on the chip...
See how this feature can lead to arbitrary kernel write on our latest blogpost:
synacktiv.com/publications/a…
Charles Muiruri retweeted
We are looking for vulnerability researchers specialising in web browsers. If you’re interested email [email protected]