https://ntopcode.wordpress.com/2018/01/16/anatomy-of-the-thread-suspension-mechanism-in-windows-windows-internals/ #internals #darw1n
Opcode
Anatomy of the thread suspension mechanism in Windows (Windows Internals)
Introduction Process suspension is a technique which is quite well-known, and it is used for a variety of reasons (even by malicious software sometimes). The term “suspension” means “stoppin…
The technical details of a working remote exploit chain for pixel (CVE-2017-5116, CVE-2017-14904) https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html #darw1n
Google Online Security Blog
Android Security Ecosystem Investments Pay Dividends for Pixel
Posted by Mayank Jain and Scott Roberts, Android security team [Cross-posted from the Android Developers Blog ] In June 2017, the Androi...
Good reading about Reverse Engineering https://twitter.com/comex/status/954129329499156480 #re #decompiler
Twitter
comex
This is something I’ve wanted for a long time. But maybe it’s too late… even if I never do get around to writing my own decompiler, RetDec is open source and looks really nice. https://t.co/UBPXRNvtBl
Enabling debug-uarts on DFU-like iBoot https://nyansatan.github.io/dfu-uart/ #uart #debugger #iboot #dukeBarman
Videos from ZN 2017: https://www.youtube.com/channel/UCtQ0fPmP4fCGBkYWMxnjh6A #darw1n
Posts series about using Radare2 - Radare2’s Visual Mode : https://moveax.me/radare2-visual-mode/ , Crackme0x03 Dissected with Radare2 : https://moveax.me/crackme0x03/ , Crackme0x02 Dissected with Radare2 : https://moveax.me/crackme0x02/ , Crackme0x01 Dissected with Radare2 : https://moveax.me/crackme0x01/ #radare2 #re #dukeBarman
https://www.reddit.com/r/SwitchHacks/comments/7rq0cu/jamais_vu_a_100_trustzone_code_execution_exploit/ #re #exploit #dukeBarman
Reddit
From the SwitchHacks community on Reddit: jamais vu - a 1.0.0 TrustZone code execution exploit on the Nintendo Switch
Explore this post and more from the SwitchHacks community
https://www.msreverseengineering.com/blog/2018/1/23/a-walk-through-tutorial-with-code-on-statically-unpacking-the-finspy-vm-part-one-x86-deobfuscation #malware #re #ida #dukeBarman
Möbius Strip Reverse Engineering
A Walk-Through Tutorial, with Code, on Statically Unpacking the FinSpy VM: Part One, x86 Deobfuscation — Möbius Strip Reverse Engineering
1. Introduction Normally when I publish about breaking virtual machine software protections, I do so to present new techniques. Past examples have included: Writing an IDA processor module to unpack a VM Logging VM execution with DLL injection Compiler…
REVERSE ENGINEERING WITH RADARE - FUNDAMENTALS AND BASICS https://pixl.dy.fi/posts/2018-01-22-reverse-engineering-basics-with-radare-fundamentals-and-basics/ #radare2 #re #dukeBarman
Forwarded from canyoupwn.me
Anti-debug with VirtualAlloc’s write watch
https://codeinsecurity.wordpress.com/2018/01/24/anti-debug-with-virtualallocs-write-watch/
https://codeinsecurity.wordpress.com/2018/01/24/anti-debug-with-virtualallocs-write-watch/
codeinsecurity
Anti-debug with VirtualAlloc’s write watch
A lesser-known feature of the Windows memory manager is that it can maintain write watches on allocations for debugging and profiling purposes. Passing the MEM_WRITE_WATCH flag to VirtualAlloc R…
SMB exploit (fixed in MS17-010+) now ported to Windows 2000 up to Windows Server 2016, and all versions in between. Reliable, doesn't cause BSOD like EternalBlue either. I've tried on Win2000 and XP. https://github.com/rapid7/metasploit-framework/pull/9473 #expdev #darw1n
GitHub
MS17-010 EternalSynergy / EternalRomance / EternalChampion aux+exploit modules · Pull Request #9473 · rapid7/metasploit-framework
MS17-010 Windows SMB Remote Command and Code Execution modules for all vulnerable targets Windows 2000 through 2016 (and of course the standard home/workstation counterparts).
auxiliary/admin/smb/...
auxiliary/admin/smb/...
Google Chrome V8 Use-After-Free Vulnerability + Exploit by Zhao Qixun (CVE-2017-15399) https://bugs.chromium.org/p/chromium/issues/detail?id=776677 #expdev #uaf #darw1n