Write-ups, blog posts and papers related to cybersecurity, reverse engineering and exploitation

github.com/0xor0ne/awes...

#infosec #cybersecurity

Exploits TOCTOU at hardware level in order to bypass secure boot

www.onekey.com/resource/mak...

#infosec #embedded

Collection of write-ups, blog posts and papers related to cybersecurity, reverse engineering and exploitation

github.com/0xor0ne/awes...

#infosec #cybersecurity

Attacking hypervisors - A practical case : www.reversetactics.com/publications...

Slides : www.reversetactics.com/docs/conf/20...

Browser Exploitation Workshop : www.youtube.com/live/b9Ohamk...

Slides : zerodayengineering.com/research/sli...

Exploit-Street : Complete list of LPE exploits for Windows (starting from 2023) : github.com/MzHmO/Exploi...

Introduction to bypass techniques for anti-cheat and EDR systems
Credits Mark Lester Dampios

whiteknightlabs.com/2024/02/09/a...

#edr

Security analysis of Windows cldflt.sys driver
Credits Chen Le Qi

starlabs.sg/blog/2023/11...

#Windows

#HackerNews daily:

Today - fuzzers! I really like fuzzing as a concept for vulnerability research, and this blog explores how to successfully conduct a fuzzing research on an open source project.
Good read!

blog.trailofbits.com/2024/10/31/f...

Just published a blog post about some critical vulnerabilities I discovered in Wazuh last year! The post covers details on how I found these vulnerabilities and highlights why security tools like EDRs can themselves become valuable targets for attackers.
#infosec

neodyme.io/en/blog/wazu...

If you are a OWASP leader, get in touch with @joshcgrossman.com to get added to the #OWASP starter pack.