0xAb
@0xab.bsky.social
Malware researcher, also interested in Mobile vulnerability research
Reposted by 0xAb
the recording of my talk "Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM Firmware" is online!
I had an absolute blast speaking and being at
@re-verse.io, so many great talks and hallway discussions
I had an absolute blast speaking and being at
@re-verse.io, so many great talks and hallway discussions
We were slow with the last video update so we figured we'd do a two for one! Lukas talks about rehosting firmware for fuzzing (youtu.be/o_ckTnTQlfs) and Robin shows off a fantastic new tool for exploring code relationships beyond single binaries (www.youtube.com/watch?v=LsDn...)
RE//verse 2025: Rethinking Emulation for Fu(zzi)n(g) (Lukas Seidel)
Full title: Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM FirmwareSlides: https://github.com/binarly-io/Research_Pu...
youtu.be
April 13, 2025 at 9:07 AM
the recording of my talk "Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM Firmware" is online!
I had an absolute blast speaking and being at
@re-verse.io, so many great talks and hallway discussions
I had an absolute blast speaking and being at
@re-verse.io, so many great talks and hallway discussions
Reposted by 0xAb
Really great read by @h0mbre (on X) about his journey to exploit a Linux n-day on kCTF. Not only the exploit but the process to understand the bug including own failures, e.g. deal with CONFIG_DEBUG_LIST, is full of insights. h0mbre.github.io/Patch_Gappin...
Patch-Gapping the Google Container-Optimized OS for $0
Background I’m trying to really focus this year on developing technically in a few ways. Part of that is reviewing kCTF entries. This helps me get a sense of what subsystems are producing the most bug...
h0mbre.github.io
February 17, 2025 at 6:31 PM
Really great read by @h0mbre (on X) about his journey to exploit a Linux n-day on kCTF. Not only the exploit but the process to understand the bug including own failures, e.g. deal with CONFIG_DEBUG_LIST, is full of insights. h0mbre.github.io/Patch_Gappin...
Reposted by 0xAb
I'm giving a talk at BOOTSTRAP25 in Austin! Hope to see y'all there! ringzer0.training/bootstrap25-...
TALK: Musing from Decades of Linux Kernel Security Research // Joshua J. Drake
The Linux Kernel powers billions of devices across industries, making it critical infrastructure. But is it secure? Josh explores this by comparing its security investments to a typical SDLC, sharing ...
ringzer0.training
February 18, 2025 at 7:04 PM
I'm giving a talk at BOOTSTRAP25 in Austin! Hope to see y'all there! ringzer0.training/bootstrap25-...
Evil Never Sleeps: When Wireless Malware Stays On After Turning Off iPhones
paper: arxiv.org/pdf/2205.06114
code: github.com/seemoo-lab/i...
github.com/seemoo-lab/f...
paper: arxiv.org/pdf/2205.06114
code: github.com/seemoo-lab/i...
github.com/seemoo-lab/f...
January 7, 2025 at 7:35 AM
Evil Never Sleeps: When Wireless Malware Stays On After Turning Off iPhones
paper: arxiv.org/pdf/2205.06114
code: github.com/seemoo-lab/i...
github.com/seemoo-lab/f...
paper: arxiv.org/pdf/2205.06114
code: github.com/seemoo-lab/i...
github.com/seemoo-lab/f...
TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution
Code github.com/compsec-snu/...
paper arxiv.org/abs/2406.08719
Code github.com/compsec-snu/...
paper arxiv.org/abs/2406.08719
arxiv.org
December 29, 2024 at 10:13 PM
TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution
Code github.com/compsec-snu/...
paper arxiv.org/abs/2406.08719
Code github.com/compsec-snu/...
paper arxiv.org/abs/2406.08719
Reposted by 0xAb
Interesting paper by Erin Avllazagaj to automatically find Linux kernel objects being potentially useful for privilege escalation, tool is called SCAVY. www.usenix.org/system/files...
www.usenix.org
November 22, 2024 at 9:44 AM
Interesting paper by Erin Avllazagaj to automatically find Linux kernel objects being potentially useful for privilege escalation, tool is called SCAVY. www.usenix.org/system/files...
Reposted by 0xAb
How does the new iOS inactivity reboot work? What does it protect from?
I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.
naehrdine.blogspot.com/2024/11/reve...
I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.
naehrdine.blogspot.com/2024/11/reve...
Reverse Engineering iOS 18 Inactivity Reboot
Wireless and firmware hacking, PhD life, Technology
naehrdine.blogspot.com
November 17, 2024 at 9:42 PM
How does the new iOS inactivity reboot work? What does it protect from?
I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.
naehrdine.blogspot.com/2024/11/reve...
I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.
naehrdine.blogspot.com/2024/11/reve...
Reposted by 0xAb
November 14, 2024 at 1:56 PM
November 12, 2024 at 5:19 PM