CVE-2019-1458 : Win32k Elevation of Privilege Vulnerability Patch Diffing to PoC Tutorial https://t.co/BbjaPAEOX2 #PatchDiffing #win32k

New blog post: Dumping the VEH in Windows 10 https://t.co/7YUv9bS6rc

I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: http…

Certificate pinning (“cert pinning” for short) is a technique used for mobile applications to add an extra layer of protection to secure communications. Some people additionally use the…

Cisco Talos researchers write how the Tor2Mine cryptomining group has returned and is now using RATs and information stealing trojans https://t.co/O52MPTz3fP

Nt!NtRaiseHardError Two CSRSS.EXE Information Disclosure Bugs

We release Connected papers to the public! Enter a paper of interest and we will generate a graph that shows that section of paper-space…

New binutils: objdump --visualize-jumps

Just finished my first blog post on a AMSI bypass technique utilizing function hooking as well as dll injection https://t.co/WsvbHzEQtx

WinDivert is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. It enables user-mode capturing/modifying/dropping of network packets sent to/from the Windows network stack. https://t.co/jKBk8elUhj #tools #pentest #packets #windows

We just published a blog and accompanying exploit for a Netgear pre-auth RCE vulnerability in 79 devices and 758 firmware images that existed since 2007. Don't you just love 1996 a style exploit dev, no pesky stack cookies/PIE. https://t.co/FmmmtWWlkM ht…

if you're not familiar with the term "defensive programming" here's an example

Our latest publication is out! We extended HookTracer, which is our @volatility & @unicorn_engine framework, in order to automatically emulate+analyze message hooks to determine if they are malicious or benign: https://t.co/JHGkC0QqIb @nolaforensix @ryandmaggio…

Pwn BlueFrag: CVE-2020-0022 RCE Exploit For Android 8.0-9.0, many thanks to https://t.co/oqKLq9X265. Debugging all details step by step with GDB is so much fun.

Antonio shares findings and tips from his research on socket-based fuzzing. Let’s start with the audit of three widely-used FTP servers, with details on interesting CVEs found along the way.

Using Frida For Windows Reverse Engineering https://t.co/Dyt9vPckVp

Big Threats Using Code Similarity. Part 1 Today, we are announcing the release of KTAE, the Kaspersky Threat Attribution Engine. This code attribution technology, developed initially for internal use by the Kaspersky Global Research and Analysis Team,

A repository of my completed writeups, along with the samples themselves. - itsKindred/malware-analysis-writeups