ryujin retweeted
"Foundations of Machine Learning"
A 505-pages book from MIT for beginners is 💯 FREE.
ryujin retweeted
🍎🗒️ New macOS persistence blog post. 🎉
➡️ Persist through the NVRAM - The 'apple-trusted-trampoline'
Meet the rc.trampoline launchd 🚀 boot task.
theevilbit.github.io/beyond/…
ryujin retweeted
Official WinDBG TTD Live Recording API has arrived. Load TTDLiveRecorder.dll and call APIs from within the traced process. Add custom metadata and events. The docs aren't really indexed, well, here's a link to the interface docs for the LiveRecorder
github.com/microsoft/WinDbg-…
Do you wish Time Travel Debugging was faster and more lightweight? Our latest version lets you decide exactly what you want recorded! Select modules to record or use the API for full control. Get your recording just the way you like it. Crusts optional. aka.ms/ttd
ryujin retweeted
I’m so thankful and blessed at the folks we have working at #TrustedSec and our ability to teach others and share our experiences.
Best team ever. Many of these folks have been at TS 9, 10, and 11 years which is so cool.
I started teaching at Blackhat I think in 2008 or 2009 but have been going since 2003 and it’s been such a huge part of my life since I started my career. It’s so cool to teach others and be part of their development and success in this industry.
One of my fondest memories is Ryujin destroying my mind and soul in the advanced windows exploitation class
and @int0x80 beating me on each challenge 😂 Dave’s a badass.
ryujin retweeted
As always, a great post by @standa_t . Super clear and informative with demos of data remapping and mitigating it through HLAT.
Hope to see Hyper-V enable it soon
A new blog post on Intel VT-rp! Part 1 is about how HLAT prevents the remapping attack, taking Windows as an example platform.
tandasat.github.io/blog/2023…
Sample hypervisor code:
github.com/tandasat/Hello-VT…
ryujin retweeted
Binary-only AddressSanitizer *on Windows* - by
@srubenst1341
The first one I know of, and insanely cool! 🤩
github.com/AFLplusplus/LibAF…
ryujin retweeted
Our paper "BEACON: Directed Grey-Box Fuzzing with Provable Path Pruning (S&P'22)" has been selected for Google Research Paper Rewards!😀
ryujin retweeted
Exciting to hear FUZZING’23 and ISSTA are coming to Seattle this summer! I’ll try to organize a social event or something!
📢 FUZZING 2023 will be co-located with @ISSTA_conf in Seattle (17-21 July)! Submission deadline and more details coming soon.
Organized by @lszekeres, @baishakhir, @yannicnoller, and YT. Planning to maintain the preregistration-based model and improve process and timeline.
ryujin retweeted
Pleased to announce that the materials of Hypervisor 101 in Rust🦀is now public!
A one-day long course taught at #gccsec, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors
github.com/tandasat/Hypervis…
ryujin retweeted
The full paper is now published at ACM TOSEM
dl.acm.org/doi/10.1145/35805…
Artifacts at github.com/eurecom-s3/dissec…
This is one of the first papers in the community that passed through a process of preregistration, more info at fuzzbench.com/blog/2021/04/2…
Are you into archeology? What about the archeology of fuzzers?
New accepted registered report at FUZZING '22, the first fuzzing workshop with a preregistration-based publication process.
"Dissecting American Fuzzy Lop - A FuzzBench Evaluation"
s3.eurecom.fr/docs/fuzzing22…
ryujin retweeted
Registration for my hypervisor development class at #OffensiveCon23 is open!
If you are interested in reading, writing or reversing hypervisors, or just low-level⚙️technologies in general, this class will be a fun and great opportunity to gain a solid understanding
Hypervisor Development for Security Analysis by Satoshi Tanda offensivecon.org/trainings/2…
ryujin retweeted
Reverse Engineering the Apple MultiPeer Connectivity Framework
evilsocket.net/2022/10/20/Re…
ryujin retweeted
I'm excited to disclose vulnerabilities I found in Linux' Wifi stack 🎉: A Heap overflow, UAFs and null-ptr-derefs 💥 going back to 5.1 (May 2019). Thanks @seemoolab for letting me work on this!
So back to wired networking until the update arrives ;)
👇
openwall.com/lists/oss-secur…
ryujin retweeted
1.5 years in the making, a reliable type aware syscall tracer for Windows 10 & 11 based on dtrace. As someone who has experimented with dtrace and seen the progress on this, this is quite a feat and a very useful tool.
Presenting D-Generate , syscall tracing as its supposed to be!
raw.githubusercontent.com/jo…
usage:
dg cmd.exe - displays all syscalls done by process with cmd.exe as imagefile.
dg 4736 - by pid 4736
dg - just everything
example of recording:
raw.githubusercontent.com/jo…
ryujin retweeted
Wanna fuzz your server 10x, 20x or even 60x faster?
Try my latest paper SnapFuzz github.com/srg-imperial/Snap…! We fuzzed 5 popular networking servers with the impressive performance speedups of 62.8 x, 41.2 x, 30.6 x, 24.6 x, and 8.4 x, and significantly simpler fuzzing harnesses!
ryujin retweeted
⚡️New IDA v8.0 released! There are a lot of new features that focus on improving firmware RE🔥
💥Function finder plugin will help to fix the lack of symbols in FW binary
💥ARC decompiler will help to speed up Intel ME research and dive deeper into EC
hex-rays.com/products/ida/ne…
ryujin retweeted
AFL++/Unicornafl 👍
Oops, they did it again!
The Titan-M chip is the root of all security in Google's Pixel phones
@DamianoMelotti & @max_r_b will talk about their journey from Reversing & Fuzzing to Code Execution & leaking its encryption keys tomorrow at @WEareTROOPERS
troopers.de/troopers22/agend…
ALT TItan-M chip in a Google Pixel phone with wires soldered for pwnage
ryujin retweeted
If you like Windows internals, @x86matthew's blog is one of my favorites. The tricks on there are so good, I almost don't want to share them.. full syscall based network IO, tons of process injection tricks, etc
This quoted post is unavailable.