pr0f8 @pr0f8

Joined September 2009

Tweets

1K
Followers

28
Following

391
Likes

2K

Eli @elikaski

2 years ago

I wrote an article about known attacks on Elliptic Curve Cryptography, check it out! github.com/elikaski/ECC_A…

7 122 392 37K 292

View Details

Just published a blog post about the bug I found on EDK2. TL.DR. the bug is not outstanding, but the limited primitive it offers is a nice excuse to play with exploitation techniques in SMM. :) blog.quarkslab.com/for-science-us…

2 43 103 20K 10

View Details

Impalabs @the_impalabs

4 years ago

Who watches the watchmen? With our latest blogpost and advisory, dive deep into the security hypervisor that protects the Android kernel of Huawei devices, and learn about the vulnerability we exploited to compromise it. 📝 blog.impalabs.com/2212_huawei-se… ⚠️ blog.impalabs.com/2212_advisory_…

0 31 33 0 5

View Details

Panos Gkatziroulis 🦄 @ipurple

4 years ago

Just in case your are in Mastodon you can still find me here --> infosec.exchange/@netbiosX

0 1 3 0 0

View Details

Impalabs @the_impalabs

4 years ago

Today we are releasing Hyperpom, a fuzzing framework for ARM64 binaries based on the Apple Silicon hypervisor. Check out our latest blogpost, as well as our GitHub repo, to learn more about the project and its internals. 📙 blog.impalabs.com/2211_hyperpom.… 🗃️ github.com/impalabs/hyper…

2 75 213 0 38

View Details

GiamMa-based researchers SDR R&D IoT @giammaiot2

4 years ago

Starlink-FI by KULeuven-COSIC github.com/KULeuven-COSIC… Starlink User Terminal Modchip: To Manage to execute arbitrary code on the Starlink User Terminal using a custom modchip that performs voltage fault injection #StarLink #SpaceX #Antenna #Dish #Terminal

2 110 392 0 52

View Details

Romain THOMAS @rh0main

4 years ago

It's a pleasure to announce the release of open-obfuscator: a free and open-source solution for obfuscating Android and iOS applications (Java/Kotlin, C/C++/Objective-C) romainthomas.fr/post/22-10-ope… obfuscator.re

8 183 553 0 155

View Details

quarkslab @quarkslab

4 years ago

"A journey of fuzzing Nvidia graphic driver leading to LPE exploitation" The slides of @Th1errry's presentation at #Hexacon2022 are now available in our github repository github.com/quarkslab/conf…

0 10 33 0 8

View Details

Edge Security @EdgeSecurity

4 years ago

I gave a talk on the Linux kernel random number generator today at the Linux Plumbers conference in Dublin. Video: youtube.com/watch?v=KkOdMw… Slides: zx2c4.com/projects/linux…

0 61 158 0 41

View Details

wrongbaud @wrongbaud

4 years ago

New Blog Post! Replicant: Reproducing Fault Injection Attacks on a Trezor One voidstarsec.com/blog/replicant… Features voltage glitching, power analysis, security bypasses, and every roadblock that we hit along the way Stay tuned for part two where we hit the glitch with a PicoEMP

6 43 101 0 16

View Details

Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile

4 years ago

Here it is! First filippo.io/newsletter issue in a while, hopefully picking up pace from here. No open tracking, so I am counting on your replies for motivation :) words.filippo.io/dispatches/pos…

2 9 42 0 2

View Details

Man Yue Mo @mmolgtm

4 years ago

This might be the best bug I found. Never thought I'd be writing a kernel exploit as reliable, clean and fast as a browser exploit. For a while I actually used this to root my research phone when can't be bothered to patch the rom: github.blog/2022-07-27-cor…

7 123 420 0 116

View Details

Romain THOMAS @rh0main

4 years ago

This weekend I played with ProGuardCORE developed by @Guardsquare. This library seems underrated and deserves to be known. Actually, ProGuardCORE is so powerful that it could be used to simplify obfuscated code (like DexGuard) as we can see in these screenshots. 1/6

4 14 61 0 11

View Details

quarkslab @quarkslab

4 years ago

The Quantum Menace! Have a look at our tables summarizing the current landscape of (French) certification process for Post-Quantum Cryptography. If you’re looking for ways to navigate it, come and talk to us! github.com/quarkslab/pqc_…

0 7 14 0 1

View Details

quarkslab @quarkslab

4 years ago

Oops, they did it again! The Titan-M chip is the root of all security in Google's Pixel phones @DamianoMelotti & @max_r_b will talk about their journey from Reversing & Fuzzing to Code Execution & leaking its encryption keys tomorrow at @WEareTROOPERS troopers.de/troopers22/age…

8 125 426 0 43

View Details

Man Yue Mo @mmolgtm

4 years ago

This is probably the most complex exploit I've done so far. A UAF in Android kernel freed by kfree_rcu (introduces a delay) in a tight race + kCFI + Samsung RKP. Yet its still possible to gain arbitrary kernel RW, disable SE and root from untrusted app. github.blog/2022-06-16-the…

4 161 500 0 105

View Details

quarkslab @quarkslab

4 years ago

Back to Wonderland, and through the looking glass we go: this time, let's all talk together and see how secure messaging works for groups. An in-depth explanation of group protocols in secure messaging by @AngeleBossuat & Laurent Grémy blog.quarkslab.com/secure-messagi… #SecureMessaging

0 14 25 0 5

View Details

Konrad Beckmann @kbeckmann

4 years ago

Love reading these kinds of write ups. Here a bug triggered through USB mass storage in U-Boot is used to bypass secure boot on a Google Nest Hub (couldn’t find the author on Twitter to retweet) fredericb.info/2022/06/breaki…

0 1 14 0 3

View Details

Ledger Donjon @DonjonLedger

4 years ago

Two weeks ago, we presented with @ANSSI_FR our research on practical attacks on OpenSSL's ECDSA at @sstic. The talk and slides are now available at sstic.org/2022/presentat…. A complementary notebook detailing the mathematical subtleties is available at github.com/Ledger-Donjon/…