pgboy @pgboydo

New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development. blog.google/threat-analysi… Stay safe out there everyone!

33 1K 2K 0 172

0 0 12 0 0

View Details

pgboy @pgboydo

6 years ago

@hFireF0X And this table is in data section, can be use as api hook securely before MS add it to PG protect list.

0 0 1 0 0

View Details

mj0011 @mj0011sec

6 years ago

Today was my last day at Qihoo360. It’s feeling great to grown up together with No.1 security teams & products of China for 14 years. Not quite feel sad with the good memories of the amazing people there. Time for new challenges.

30 6 176 0 2

View Details

pgboy @pgboydo

6 years ago

@jonasLyk Yeah, I agree, procmon is very powerful, but It is hard to extend, so I create this project to do that , Especially find EOP(see EOP branch), The driver in this project is full reverse from procmon(even bugs 😅). you can modify/extend it and replace original procmon's driver

0 0 0 0 0

View Details

pgboy @pgboydo

6 years ago

@jonasLyk Emm. Ignore the poor gui you can just replace the procmon`s driver...

1 0 0 0 0

View Details

pgboy @pgboydo

7 years ago

@zinwa_lin 特短大军无处不在

1 0 0 0 0

View Details

pgboy @pgboydo

7 years ago

So. Same as I guessed --> "PerfInfoLogSyscallEntry"

Nick Peterson 🇺🇲 ✝️ @nickeverdox

7 years ago

InfinityHook sample is live, please consult the readme. Massive kudos to @0xNemi for incredible code clean-up. Microsoft says this is not security issue, have fun. github.com/everdox/Infini…

4 154 344 0 35

0 0 1 0 0

View Details

Aleph Research @alephsecurity

7 years ago

We hacked our way to executing an interactive bash shell on iOS on QEMU. We based the research on the work done by @zhuowei. Thanks! alephsecurity.com/2019/06/17/xnu…

10 199 553 0 37

View Details

argp @_argp

8 years ago

Happy Ghidra month everybody! nsa.gov/resources/ever…

0 12 56 0 1

View Details

Alex Ionescu @aionescu

8 years ago

Interested in Hyper-V Internals? Read Part 2 of my continuing series on "Writing a Hyper-V "Bridge" for Fuzzing" as we get into the guts of hypercalls: alex-ionescu.com/?p=471 with sample code and more!

6 198 455 0 41

View Details

j00ru//vx @j00ru

8 years ago

In an effort to share more of my source code publicly, I've uploaded Bochspwn Reloaded (the kernel infoleak detector) to GitHub. For those interested, it may shed some light on the implementation details of the project. See: github.com/google/bochspw…