Vulnmod @pwnderer1

Figment of the kernel space Joined February 2022

Tweets

325
Followers

53
Following

633
Likes

1K

lcamtuf @lcamtuf

5 months ago

Look GCC, I don't think I'm being unreasonable here

31 80 2K 81K 242

Download Image

jro @junr0n

5 months ago

Some IDA MCP servers can be tricked into executing arbitrary code directly from the malware sample

16 95 541 83K 215

Download Video

Did you know that pressing CTRL+D in linux terminal is like pressing ENTER? (to some extent, of course) Well, I didn't, so after randomly investigating what CTRL+D actually does, I've decided it's a fun topic to write about: hackarcana.com/article/ctrl-d…

4 11 58 6K 17

GCC - GNU Toolchain @gnutools

9 months ago

Making memcpy(NULL, NULL, 0) well-defined. @nikita_ppv @rhdevelopers developers.redhat.com/articles/2024/…

0 24 102 6K 20

Vulnmod @pwnderer1

a year ago

Always.

Yarden Shafir @yarden_shafir

a year ago

Always.

6 3 104 8K 7

0 0 0 32 0

blasty @bl4sty

a year ago

you gotta appreciate the way they shipped the backdoored object file. added some "test" data to the source tree that gets unxz'd and (dd) carved in a specific way, that is fed into a deobfuscator written in.. awk script and the result gets unxz'd again

6 128 707 107K 142

Download Image

Vulnmod @pwnderer1

a year ago

Security through obscurity :)

Anderson Nascimento @andersonc0d3

a year ago

Security through obscurity :)

1 1 21 2K 12

Download Image

0 0 0 77 1

Silvio Cesare @silviocesare

2 years ago

Bugs from the 90s… we all know gets() should never be used. It even says so in the Linux man page. The compiler (gcc for this example) lets you. It does give you a warning though. But scanf* and %s is exactly the same unbounded buffer overflow. But no compiler warning.

3 1 14 1K 0

Binni Shah @binitamshah

2 years ago

Malware Hiding in PDFs : What You Need to Know : mcafee.com/blogs/other-bl…

9 217 795 65K 480

Download Image

Alex Matrosov @matrosov

2 years ago

Rust-based firmware is inherently secure by design. What could possibly go wrong?

47 134 1K 422K 146

Download Image

chompie @chompie1337

2 years ago

when the bug only triggers once in a thousand executions

11 17 239 25K 6

Download Image

LiveOverflow 🔴 @LiveOverflow

2 years ago

Apple today announced changes to increase attack surface apple.com/newsroom/2024/…

12 32 242 45K 39

Download Image

𝚊𝚕𝚔𝚊𝚕𝚒 @alkalinesec

2 years ago

pretty sure nearly all the success of LLMs at vuln id is due to the benchmark datasets of past vulns. i gave gpt3.5 the vulnerable code from the GHOST writeup by @qualys and it gave the correct result, similar to the report . wow! then i renamed one of the variables "cool_guy"

6 6 43 8K 17

Download Image

JS0N Haddix @Jhaddix

2 years ago

My personal GPT for offensive security, SecGPT. Been working on it for a while now. I use it like i have a peer in a chair next to me, asking questions to learn and bounce ideas off of. Enjoy: chat.openai.com/g/g-HTsfg2w2z-…

24 310 1K 104K 1K

Synacktiv @Synacktiv

2 years ago

To facilitate reverse-engineering of large programs, vulnerability research and root-cause analysis on iOS, Android, and other major platforms, @myr463 and @Hexabeast released Frinet, a tool combining Frida with an enhanced version of Tenet. synacktiv.com/publications/f…

2 171 445 34K 159

h0mbre @h0mbre_

2 years ago

lmao ctftime.org/writeup/37670

0 5 44 7K 13

Tavis Ormandy @taviso

2 years ago

New write-up on an Intel Ice Lake CPU vulnerability, we can effectively corrupt the RoB with redundant prefixes! 🔥 An updated microcode is available today for all affected products, cloud providers should patch ASAP. lock.cmpxchg8b.com/reptar.html

12 348 1K 412K 205

Tim Willis @itswillis

2 years ago

New Project Zero blogpost by Mark Brand - first mobile device ships with MTE (and how to enable it). "MTE on a production handset for the first time is a big step forward... there's real potential to use this technology to make 0-day harder". googleprojectzero.blogspot.com/2023/11/first-…

3 80 188 54K 39

Harrison Green @hgarrereyn

2 years ago

the fuzzer development process

3 19 236 16K 4

Download Image

Zion Leonahenahe Basque @mahal0z

2 years ago

I'm excited to announce a new decompilation control flow structuring algorithm, SAILR, which is the first to precisely revert compiler optimizations in decompilation. Find out how in our USENIX 2024 paper: zionbasque.com/files/publicat…. Code, info, and links in the 🧵