About Rust symbol recovery: a journey into reversing Krustyloader
https://nofix.re/posts/2024-11-02-rust-symbs/?_=0
https://nofix.re/posts/2024-11-02-rust-symbs/?_=0
nofix.re
KrustyLoader - About stripped Rust symbol recovery
About Rust symbol recovery: a journey into reversing Krustyloader, a rust-based dropper targeting Invanti
Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage
https://p.ost2.fyi/courses/course-v1:OpenSecurityTraining2+TC1101_IntroTPM+2024_v1/about
https://p.ost2.fyi/courses/course-v1:OpenSecurityTraining2+TC1101_IntroTPM+2024_v1/about
p.ost2.fyi
Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage
Learning how to use Trusted Platform Modules (TPMs)
GhostRace: Exploiting and Mitigating Speculative Race Conditions
https://download.vusec.net/papers/ghostrace_sec24.pdf
https://download.vusec.net/papers/ghostrace_sec24.pdf
IDA plugin to display the calls and strings referenced by a function as hints.
https://gist.github.com/williballenthin/eeea2093888e8d4004ec06b5a1dede1e
https://gist.github.com/williballenthin/eeea2093888e8d4004ec06b5a1dede1e
Gist
hint_calls.py
GitHub Gist: instantly share code, notes, and snippets.
Презентация
The complexity of reversing Flutter applications
https://www.fortiguard.com/events/5403/nullcon-berlin-2024-the-complexity-of-reversing-flutter-applications
The complexity of reversing Flutter applications
https://www.fortiguard.com/events/5403/nullcon-berlin-2024-the-complexity-of-reversing-flutter-applications
FortiGuard Labs
Publications | FortiGuard Labs
Flutter is a cross-platform application development platform. With the same codebase, developers write and compile native applications for Android,...
Exploit Development: No Code Execution? No Problem! Living The Age of VBS, HVCI, and Kernel CFG
https://connormcgarr.github.io/hvci/
https://connormcgarr.github.io/hvci/
Connor McGarr’s Blog
Exploit Development: No Code Execution? No Problem! Living The Age of VBS, HVCI, and Kernel CFG
Dealing with Virtualization-Based Security (VBS), Hypervisor-Protected Code Integrity (HVCI), and Kernel Control Flow Guard (kCFG).
Fuzzing IoT Devices Using the Router TL-WR902AC as Example
https://github.com/otsmr/blackbox-fuzzing
https://github.com/otsmr/blackbox-fuzzing
GitHub
GitHub - otsmr/blackbox-fuzzing: Fuzzing IoT Devices Using the Router TL-WR902AC as Example
Fuzzing IoT Devices Using the Router TL-WR902AC as Example - otsmr/blackbox-fuzzing
Fuzzing Mimikatz On Windows
https://sec-consult.com/blog/detail/hack-the-hacker-fuzzing-mimikatz-on-windows-with-winafl-heatmaps-0day/
https://sec-consult.com/blog/detail/hack-the-hacker-fuzzing-mimikatz-on-windows-with-winafl-heatmaps-0day/
SEC Consult
Hack The Hacker – Fuzzing Mimikatz On Windows With WinAFL & Heatmaps (0day)
In this blogpost, I want to explain two topics from a theoretical and practical point of view: How to fuzz windows binaries with source code available (this part is for developers) and How to deal with big input files (aka heatmap fuzzing) and crash analysis…