/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 roundofthree.github.io
GEF for CheriBSD Morello | RoundofThree
| | blog.xyz.is
Vita sceNetIoctl use-after-free
8.8 parsecs away

Travel
| |
| | reverse.put.as
Knock Knock! Who's There? - An NSA VM | Reverse Engineering
9.2 parsecs away

Travel
| | Back in 2017 (feels like ages ago) I decided to take a peek into the ShadowBrokers leaks and reverse some of the tools. I started on dewdrop simply because it had a macOS version. I made local presentations at 0xOpoSec and BSidesLisbon but those slides were never published for obvious reasons (aka live implants all over the Internet). Significant time has passed and everyone went crazy last week with the beautiful NSO exploit VM published by Project Zero, so why not ride the wave and present a simple NSA...
| | prog.world
[No title]
7.8 parsecs away

Travel
| | [AI summary] This technical article details a research project from Summer Of Hack 2019 that utilized Intel Processor Trace hardware features to successfully record and analyze code execution paths within System Management Mode (SMM) on x86 processors, overcoming OS protection barriers to identify potential security vulnerabilities.
| | klecko.github.io
BFS Ekoparty 2022 Kernel exploitation challenge write-up | Klecko Blog
25.6 parsecs away

Travel
| Last month Blue Frost Security published two exploitation challenges for Ekoparty 2022. One of them was a Linux kernel challenge. I don't have much experience with Linux kernel exploitation, so this was a good opportunity to practise. I also write this up as a reference for my future self.