Detect_kernel_exploits.pdf
1 MB
#Offensive_security
BlackHat USA 2022:
"Return to sender - Detecting kernel exploits with eBPF"
]-> Tool: https://github.com/Gui774ume/krie
📰
📚
BlackHat USA 2022:
"Return to sender - Detecting kernel exploits with eBPF"
]-> Tool: https://github.com/Gui774ume/krie
📰
📚
Save_the_Environment.pdf
3.1 MB
#Research
"Save The Environment (Variable):
Hijacking Legitimate Applications With a Minimal Footprint", DEF CON 30.
]-> https://www.wietzebeukema.nl/blog/save-the-environment-variables
📰
📚
"Save The Environment (Variable):
Hijacking Legitimate Applications With a Minimal Footprint", DEF CON 30.
]-> https://www.wietzebeukema.nl/blog/save-the-environment-variables
📰
📚
WebAssembly_Really_Safe.pdf
1.3 MB
#Research
"Is WebAssembly Really Safe? --Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way"
]-> Tool: https://github.com/ha1vk/blackhat_wasm
📰
📚
"Is WebAssembly Really Safe? --Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way"
]-> Tool: https://github.com/ha1vk/blackhat_wasm
📰
📚
Destabilizing_Hash_Table_MsIIS.pdf
4.5 MB
#Offensive_security
BlackHat USA 2022:
"Let's Dance in the Cache: Destabilizing Hash Table on Microsoft IIS"
📰
📚
BlackHat USA 2022:
"Let's Dance in the Cache: Destabilizing Hash Table on Microsoft IIS"
📰
📚
RE_Mind.pdf
4.5 MB
#Research
#reversing
"RE-Mind: a First Look Inside the Mind of a Reverse Engineer", 31st USENIX, 2022.
]-> Code for UI, backend, engine and statistical analysis for RE:
https://github.com/elManto/REmind
📰
📚
#reversing
"RE-Mind: a First Look Inside the Mind of a Reverse Engineer", 31st USENIX, 2022.
]-> Code for UI, backend, engine and statistical analysis for RE:
https://github.com/elManto/REmind
📰
📚
Internal_Srv_Error.pdf
1.5 MB
#Threat_Research
BlackHat USA 2022:
"Internal Server Error: Exploiting Inter-Process Communication in SAP's HTTP Server"
]-> Whitepaper (.pdf): https://i.blackhat.com/USA-22/Wednesday/US-22-Doyhenard-Internal-Server-Error-wp.pdf
📰
📚
BlackHat USA 2022:
"Internal Server Error: Exploiting Inter-Process Communication in SAP's HTTP Server"
]-> Whitepaper (.pdf): https://i.blackhat.com/USA-22/Wednesday/US-22-Doyhenard-Internal-Server-Error-wp.pdf
📰
📚
ELF.pdf
3.8 MB
#Offensive_security
BlackHat USA 2022:
"ELF Section Docking Revisiting Stageless Payload Delivery"
]-> ELF Sectional docking payload injector system:
https://github.com/xforcered/elfpack
📰
📚
BlackHat USA 2022:
"ELF Section Docking Revisiting Stageless Payload Delivery"
]-> ELF Sectional docking payload injector system:
https://github.com/xforcered/elfpack
📰
📚