Our work "Defense and Attack Techniques Against File-Based TOCTOU Vulnerabilities: A Systematic Review" (with @Razvieu and P. Álvarez) is finally out! ieeexplore.ieee.org/document/97180… (1/3)

The Peloton Bike ran an unpatched version of Android 7 which led to it being vulnerable to a number of known issues, most significantly CVE-2021-0326, which could allow an attacker within WiFi range to execute arbitrary code on the device with no user interaction.

patch analysis and POC creation, exploitation use

2 factor authentication

Shellcode injection technique. Given as C++ header, standalone Rust program or library. - Idov31/FunctionStomping

Some time ago, as part of a new hobby, I bought a telescope 🔭 (Newtonian reflector), and some additional eyepieces… and filters… and a motor drive for the mount… and an astronomy USB camera 😬. Hey, you need all this stuff, seriously! For the whole setup to…

Introduction I played Hayyim CTF 2022 with keymoon, st98, and theoremoon. We solved all pwn tasks there and stood the 3rd place. *1 There was a pwn challenge to…

This was a fun afternoon reverse engineering project so I figured I’d write a bit about it.

Overview of current GLIBC heap exploitation techniques up to GLIBC 2.34, including their ideas and introduced mitigations along the way

Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM. - JonathanSalwan/VMProtect-devirtualization

In the early 2000’s, the Segway company released a personal transporter that would become iconic. The Segway Human Transporter was quickly...

Few software development life cycle (SDLC) models explicitly address software security in detail, so secure software development practices usually need to be added to each SDLC model to ensure that the software being developed is well-secured. This document…

A previously unreported threat actor has been targeting civil society for over a decade. Read about how it operates and its relationships to other threats.

Recently, we've been researching several threat actors operating in South Asia: Transparent Tribe, SideCopy, etc., that deploy a range of remote access trojans (RATs). After a hunting session in our malware sample repositories and VirusTotal while looking…

The second article of MAS (Malware Analysis Series) is available for reading on: (link): I hope you like it and keep reversing! Have an excellent day. Alexandre Borges.