Hi there, I'm Anas Roubi ... A hacker.

CVE-2021-40444 PoC. Contribute to lockedbyte/CVE-2021-40444 development by creating an account on GitHub.

These vulnerabilities are worse than ProxyLogon, the Exchange vulnerabilities revealed in March.

Authored by ChanUng Pak   McAfee’s Mobile Research team recently found a new Android malware, Elibomi, targeting taxpayers in India. The

Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...

This afternoon I had the luck to do a presentation (in person, yes!) to the @BinsecTool group about @reverseame's work done in recent years in memory forensics, with a fruitful discussion for future joint work. Good ideas to explore ahead }:). Slides here:…

Bughound is an open-source static code analysis tool that analyzes your code and sends the results to Elasticsearch and Kibana

Find out how a vulnerability in macOS Finder system allows remote attackers to trick users into running arbitrary commands.

The most common issue I receive on the tracker for Il2CppInspector is “this file won’t load”. Oftentimes this is due to a bug in the tool, but sometimes it leads me down a reverse…

Authors Giovanni Guido Alessandro Braccio Abstract In this first blog post about DNS rebinding topic,  we are going to show a practical exa...

First steps with Flask and Static Code Analysis with Semgrep

Wireless and firmware hacking, PhD life, Technology

As well known, iOS14.8 patched two 0 days in the wild, one of which is the pegasus 0-click vulnerability. You can get the root cause and more interesting findings by reading my analysis from here.

There is a battle ongoing in the realm of secure caches. Cache side-channels are a serious security problem as they allow an attacker to monitor a victim program’s execution and leak sensitive data…