AnyConnect_Sec_Analysis.pdf
248.6 KB
#reversing
"Very Pwnable Network: Cisco AnyConnect Security Analysis", 2022.
When corporations build an internal network, they often stick to the same vendor for all components due to compatibility reasons. A vendor should offer a variety of solutions meeting all the customer’s needs. Creating and maintaining such a product range is a huge effort, and, thus, the corporate network landscape is dominated by very few vendors. Cisco’s market share including VPNs and other enterprise network equipment is around 50 % [1]. Thus, users connecting to corporate VPNs will likely face a setup that requires them to install the Cisco AnyConnect client.
📚
"Very Pwnable Network: Cisco AnyConnect Security Analysis", 2022.
When corporations build an internal network, they often stick to the same vendor for all components due to compatibility reasons. A vendor should offer a variety of solutions meeting all the customer’s needs. Creating and maintaining such a product range is a huge effort, and, thus, the corporate network landscape is dominated by very few vendors. Cisco’s market share including VPNs and other enterprise network equipment is around 50 % [1]. Thus, users connecting to corporate VPNs will likely face a setup that requires them to install the Cisco AnyConnect client.
📚
SingPass.pdf
17.4 MB
#reversing
"iOS SingPass RASP Analysis", 08.2022.
]-> https://github.com/romainthomas/romainthomas.github.io/tree/main/post/22-08-singpass-rasp-analysis
📰
📚
"iOS SingPass RASP Analysis", 08.2022.
]-> https://github.com/romainthomas/romainthomas.github.io/tree/main/post/22-08-singpass-rasp-analysis
📰
📚
iPhone_Lightning_hacking.pdf
10.2 MB
#reversing
"The hitchhacker’s guide to iPhone Lightning & JTAG hacking", DEF CON 30.
]-> https://github.com/stacksmashing/tamarin-firmware
📰
📚
"The hitchhacker’s guide to iPhone Lightning & JTAG hacking", DEF CON 30.
]-> https://github.com/stacksmashing/tamarin-firmware
📰
📚
RE_Mind.pdf
4.5 MB
#Research
#reversing
"RE-Mind: a First Look Inside the Mind of a Reverse Engineer", 31st USENIX, 2022.
]-> Code for UI, backend, engine and statistical analysis for RE:
https://github.com/elManto/REmind
📰
📚
#reversing
"RE-Mind: a First Look Inside the Mind of a Reverse Engineer", 31st USENIX, 2022.
]-> Code for UI, backend, engine and statistical analysis for RE:
https://github.com/elManto/REmind
📰
📚
Glitched_on_Earth.pdf
13.6 MB
#reversing
#Hardware_Security
BlackHat USA 2022:
"Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal"
📰
📚
#Hardware_Security
BlackHat USA 2022:
"Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal"
📰
📚
Jailbreaking_RouterOS.pdf
10.7 MB
#reversing
"Pulling MikroTik into the Limelight:
Demystifying and Jailbreaking RouterOS", REcon 2022.
]-> https://margin.re/blog/pulling-mikrotik-into-the-limelight.aspx
📰
📚
"Pulling MikroTik into the Limelight:
Demystifying and Jailbreaking RouterOS", REcon 2022.
]-> https://margin.re/blog/pulling-mikrotik-into-the-limelight.aspx
📰
📚