/explore
|
You are here 
|
reverse.put.as | ||
| | | | |
comsecuris.com
[AI summary] This blog post discusses a detailed exploit chain targeting a mobile phone's application processor OS through a compromised modem. The author outlines the process of identifying vulnerabilities in the baseband firmware, reverse engineering the MT6795's cellular stack layers, and attempting to fuzz the MM layer for potential memory corruption issues. The post also touches on the challenges of creating a persistent rootkit via the modem and the importance of hardware isolation in securing mobile platforms. |
|
| | | | | ||
| | | | |
x0rb3l.github.io
OverviewIn Part II we concluded our static analysis by becoming familiar with IDA Pro and using it to confirm one of our previous findings and to examine obfuscated strings on the stack. In this article, we will be conducting code analysis. Code analysis involves examining the code that comprises the specimen, only this time in a dynamic fashion. We will be using x32dbg as our debugger. The goal of Part III is to demonstrate how we can step through the malware's instructions and allow it to automatically reveal information about itself that is otherwise "invisible" while not running.x32dbgx32dbg is the 32-bit debugger that is a part of the open-source x64dbg software package. It is probably my favorite user mode Windows debugger due to its ease of use and fr... |
|
| | | | | ||
| | | | |
blog.thalium.re
[AI summary] The blog post discusses the author's experience in vulnerability research and exploitation targeting Steam and its related products, including Steam Link and Remote Play. It covers various vulnerabilities such as format string vulnerabilities, request forgery, heap overflows, and a remote code execution (RCE) exploit. The author also details their interactions with HackerOne and Valve, highlighting the challenges in getting timely responses and the eventual resolution of the reported issues. |
|
| | | | | ||
| | | | |
machevalia.blog
[AI summary] The article details a remote code execution vulnerability in a .tgz file upload feature, where the server's parsing logic allowed an attacker to bypass filters by crafting a malicious archive with a web shell. |
|
| | | |||
