Fuzzy search tool for IDA Pro. Contribute to Ga-ryo/IDAFuzzy development by creating an account on GitHub.

As promised last week, the details of the .PDB heap memory disclosure in Visual Studio (CVE-2018-1037) are now available at https://t.co/vgryBrNBc0. Infoleaks are a really special breed of bugs, be it in kernel or user-mode 🐛

I have been meaning to learn about SMT based program analysis for a long time and recently I started learning about the topic. There are so many frameworks, articles and tutorials out there that I …

BackgroundVMware is one of the leaders in virtualization nowadays. They offer VMware ESXi for cloud, and VMware Workstation and Fusion for Desktops (Windows, Linux, macOS).The technology is very well

A while ago, when working on PowerMemory, I discovered a hidden account configured by Nvidia on one of my computers ( https://twitter.com/p...

Persistence in the Age of PatchGuard and Windows 10

CylancePROTECT contains a privilege escalation vulnerability due to the update service granting Users Modify permissions on the log folder, as well as any log file it writes. This allows any user to empty the folder and use it as a Mount Point, which can…

Blog about anti-virus software vulnerabilities.

New flaws and even more patches - "Spectre Next Generation" is just around the corner. According to information exclusively available to c't, researchers have already found eight new security holes in Intel processors.

Unit 42 examines recent Sofacy group activities including multiple attacks to government entities.