DPR3

@D0C_H0LL1D4Y

exploit dev, comp sec research

Vrijeme pridruživanja: listopad 2014.
0 fotografija ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @D0C_H0LL1D4Y

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @D0C_H0LL1D4Y

  1. proslijedio/la je Tweet
    4. velj

    I recently left my position and I'm looking for consulting work. (Not looking for a full-time position.) Particularly interested in low-level security and development work, e.g. code audits, reverse engineering, exploit mitigations, LLVM development, etc.

    5 replies 37 proslijeđenih tweetova 77 korisnika označava da im se sviđa
    Poništi
  2. proslijedio/la je Tweet
    21. sij

    In those CET times: It's possible to return in unwinding to any address in the SSP, causing a "type confusion" between stack frames ;) I really like the different variants of this concept :) Type confusions are on fire! (stack frames, objc for PAC bypass)

    After a lot of work and some crypto-related delays, I couldn't be more proud to publish 's and mine latest research - The complete overview of CET internals on Windows (so far!):
    5 proslijeđenih tweetova 29 korisnika označava da im se sviđa
    Poništi
  3. proslijedio/la je Tweet
    26. pro 2019.

    New blogpost: Sanitized Emulation with QEMU-AddressSanitizer I just open-sourced my QEMU patches to fuzz binaries with ASan, QASan. You can also use it with ARM targets on Linux, a thing that you can't do with LLVM ASan!

    118 proslijeđenih tweetova 273 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  4. proslijedio/la je Tweet
    24. pro 2019.

    Seems some people do read this feed at least :)

    bad fix, introduces a double free:
    Prikaži ovu nit
    2 proslijeđena tweeta 10 korisnika označava da im se sviđa
    Poništi
  5. proslijedio/la je Tweet
    13. pro 2019.

    Huge weekend ahead for VIPs. tonight. Big play tomorrow then we cash Sunday with . Going for +30U this week 🔥🔥 Dm to grab a package and start cashing 💰💰💰

    1 proslijeđeni tweet
    Poništi
  6. 11. pro 2019.

    Yet another great vuln by CVE-2019-19726. wideOpenBSD local root

    1 korisnik označava da mu se sviđa
    Poništi
  7. 2. pro 2019.

    Did I really just forget my LUKS password? 😩

    1 korisnik označava da mu se sviđa
    Poništi
  8. proslijedio/la je Tweet
    23. stu 2019.

    An amazing video about "Arbitrary Code Execution in Zelda Ocarina of Time". Also great editing to show the complex memory interactions!

    1 reply 97 proslijeđenih tweetova 375 korisnika označava da im se sviđa
    Poništi
  9. proslijedio/la je Tweet
    21. stu 2019.

    Maersk didn't have a single backup up their 100 global domain controllers. Designed to backup to each other, they could lose 1 or 25 DCs & be fine. They just couldn't lose all of them. Miraculously, said at , a serendipitous blackout in Ghana saved 1 DC.

    28 replies 149 proslijeđenih tweetova 437 korisnika označava da im se sviđa
    Poništi
  10. proslijedio/la je Tweet
    16. stu 2019.

    I've just written a performant in-memory fuzzing module with for AFL++ . Watch AFL++ on GH and stay tuned for a frida_mode in the next days!

    5 replies 109 proslijeđenih tweetova 307 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  11. proslijedio/la je Tweet
    8. stu 2019.

    What I found interesting 1/3: Deep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019 With some overview and deep dive into several real exploits. Including , SMAP, exploiting races. 1/3

    The videos from LSS-EU are published!
    1 reply 45 proslijeđenih tweetova 110 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  12. proslijedio/la je Tweet
    6. stu 2019.

    A random bit of trivia I remembered recently. Got a DOS box with a password protected BIOS and no tools handy? Corrupt CMOS checksum with this simple command and get inside after reboot: echo “dummy” > CLOCK$

    12 replies 155 proslijeđenih tweetova 703 korisnika označavaju da im se sviđa
    Poništi
  13. proslijedio/la je Tweet
    30. lis 2019.

    Static analysis to determine object sizes allocated by various syscalls to perform kernel SLAB/SLUB layout manipulation, enabling exploitation. 30 new N-day exploits coming, abstract includes link to a sample set of exploits.

    Tweet je nedostupan.
    1 reply 20 proslijeđenih tweetova 63 korisnika označavaju da im se sviđa
    Poništi
  14. 21. lis 2019.

    Anyone know if IDA Pro sends all binaries to a remote server to help with “improvements” for future releases?

    1 korisnik označava da mu se sviđa
    Poništi
  15. proslijedio/la je Tweet
    3. lis 2019.

    Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others. Reported under 7 day deadline due to evidence of in-the-wild exploit. and I quickly wrote a POC to get arbitrary kernel r/w using this bug, released in tracker.

    495 proslijeđenih tweetova 1.042 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  16. proslijedio/la je Tweet
    2. lis 2019.

    [Now patched] WhatsApp RCE

    58 proslijeđenih tweetova 109 korisnika označava da im se sviđa
    Poništi
  17. proslijedio/la je Tweet
    1. lis 2019.

    geohot is back - just for checkm8:

    1 proslijeđeni tweet
    Poništi
  18. proslijedio/la je Tweet
    17. ruj 2019.

    Apparently Apple kernel 0day (I don’t have a test machine for Apple). thread_set_state() is called on current thread (illegal according to docs) in 32bit process with all registers set to 0xffffffff other than gs=23. Exploit bypasses SMEP

    GitHub - A2nkF/macOS-Kernel-Exploit: macOS Kernel Exploit for CVE-????-???? (currently a 0day. I'll add the CVE# once it is published). Credit for the bug go to :).
    52 proslijeđena tweeta 102 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  19. proslijedio/la je Tweet
    15. ruj 2019.

    cursed regex (1,253,604 chars long)

    296 proslijeđenih tweetova 1.187 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  20. proslijedio/la je Tweet
    14. ruj 2019.
    Odgovor korisnicima

    Add NT API’s grammars to Domato, then use engine to run generated Code via chakra. CC

    5 proslijeđenih tweetova 21 korisnik označava da mu se sviđa
    Poništi

@D0C_H0LL1D4Y još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·