biazo

The worst bugs are the ones where the code mostly works. Low-level AI coding is so complex that I (an the AI that I write code with), produce an annoying number of them.

You asked, we delivered: Binary Ninja 5.0 brings major iOS reversing upgrades! DYLD Shared Cache is now a first-class feature, with up to 18x faster performance and way smarter analysis across the board. binary.ninja/2025/04/23/5...

Fileless lateral movement with trapped COM objects | IBM New research from IBM X-Force Red has led to the development of a proof-of-concept fileless lateral movement technique by abusing trapped Component Object Model (COM) objects. Get the details.

[Blog] This ended up being a great applied research project with my co-worker Dylan Tran on weaponizing a technique for fileless DCOM lateral movement based on the original work of James Forshaw. Defensive recommendations provided.

- Blog: ibm.com/think/news/f...
- PoC: github.com/xforcered/Fo...

The Key to COMpromise - Writing to the Registry (again), Part 4 In this series of blog posts, we cover how we could exploit five reputable security products to gain SYSTEM privileges with COM hijacking. If you've never heard of this, no worries. We introduce all r...

Wrapping up our COM hijacking series! 🎉

In the final part, we discuss a custom IPC protocol, use a registry write to gain SYSTEM privileges, and explore Denial of Service attacks on security products. 💥💻

Don't miss it! neodyme.io/en/blog/com_...

Screenshot showing the execution of the proof-of-concept named PowerChell in comparison to a typical PowerShell prompt. In particular, it shows that PowerChell is able to bypass the Constrained Language Mode (CLM).

In this blog post, I explain how I was able to create a PowerShell console in C/C++, and disable all its security features (AMSI, logging, transcription, execution policy, CLM) in doing so. 💪

👉 blog.scrt.ch/2025/02/18/r...

HTB: Cicada Cicada is a pure easy Windows Active Directory box. I’ll start enumerating SMB shares to find a new hire welcome note with a default password. I’ll RID-cycle to get a list of usernames, and spray that password to find a user still using it. With a valid user I can query LDAP to find another user with their password stored in their description. That user has access to a share with a dev script used for backup, and more creds. Those creds work to get a shell, and the user is in the Backup Operators group, so I can exfil the registry hives and dump the machine hashes.

Cicada from HackTheBox is a really nice easy introduction to Windows / Active Directory exploitation.

Add support for Unicorn engine by henri2h · Pull Request #1054 · AFLplusplus/LibAFL Add support for unicorn engine for CPU emulation Currently support X86 ARM ARM64 Supersede: henri2h#1

github.com/AFLplusplus/... 👀

LibAFL 🤝 Unicorn

#LibAFL #🤝 #Unicorn
by @henri2h.bsky.social

Hyperlight: Achieving 0.0009-second micro-VM execution time - Microsoft Open Source Blog In this post, we’ll take the demo application and show how it demonstrates one way you can use Hyperlight in your applications. Learn more.

Learn how hyperlight can create virtualization-based sandboxes for WASM applications:

Introducing HyperHook: A harnessing framework for Nyx In this post, we introduce HyperHook, a harnessing framework for snapshot-based fuzzing for user-space applications using Nyx. HyperHook simplifies guest-to-host communication and automates repetitive...

🪝Introducing HyperHook! 🪝
A harnessing framework for snapshot-based #fuzzing using Nyx. ⚒️
HyperHook simplifies guest-to-host communication & automates repetitive tasks, making snapshot-fuzzing easier & more efficient!
🔗 Read more: neodyme.io/en/blog/hype...

I’m very excited to announce that we at V8 Security have finally published our first version of Fuzzilli that understands Wasm!
Go check it out at https://github.com/googleprojectzero/fuzzilli.
While we still have a way to go in improving it, we think it shows a promising approach!

Process Hollowing on Windows 11 24H2 Process Hollowing (a.k.a. RunPE) is probably the oldest, and the most popular process impersonation technique (it allows to run a malicious executable under the cover of a benign process). It is us…

In case if you wonder what broke #ProcessHollowing on Windows 11 24H2, I have something for you: hshrzd.wordpress.com/2025/01/27/p...

Profile Explorer is a tool for viewing CPU profiling traces collected through the Event Tracing for Windows (ETW) infrastructure on machines with x64 and ARM64 CPUs

github.com/microsoft/pr...

Lots of questions about the new admin protection feature in Windows so the MORSE team decided to do a writeup. Working on part 2 now, should be done in a day or two. techcommunity.microsoft.com/blog/microso...

the chinese netizens have put america in the ground

Just unrestricted an issue that shows a fun new attack surface. Android RCS locally transcribes incoming media, making vulnerabilities audio codecs now fully-remote. This bug in an obscure Samsung S24 codec is 0-click

project-zero.issues.chromium.org/issues/36869...

Kids these days don't even know how much opportunity they have to learn hacking from actual pros.

I know there is a lot of content out there, so it can be hard to find the good stuff. But 10 years ago you had to be lucky to find at least something.

Anyway, watch this 👇

Trying Out Binary Ninja's new WARP Signatures with IPSW Diff'ing Binary diff'ing is pretty complex, but being able to apply markup from one binary to another is quite powerful. Binary Ninja's new WARP extends previous efforts, using SigKit, to quickly identify libr...

Binary diff'ing is hard. But it's super powerful to apply markup from previous reverse engineering efforts to a new binary.

Binary Ninja is switching up how they match function signatures with WARP.

www.seandeaton.com/binary-ninja...

#binaryninja #reverseengineering #ghidra #ida #decompiler

Stability in AFL++/LibAFL is quantified by the percentage of edges in the target that are considered “stable”. If repeatedly sending identical inputs results in the data traversing the same path through the target each time, then the stability is determined to be 100%.

Can you find an ITW 0-day from crash logs? Project Zero finds out

googleprojectzero.blogspot.com/2024/12/qual...

YouTube video by Microsoft Security Response Center (MSRC) BlueHat 2024: S09: Pointer Problems – Why We’re Refactoring the Windows Kernel

Important news: Microsoft is working to bring SMAP into Windows

www.youtube.com/watch?v=-3jx...

Great talk by Joe Bialek from MORSE team

GitHub - microsoft/markitdown: Python tool for converting files and office documents to Markdown. Python tool for converting files and office documents to Markdown. - microsoft/markitdown

Microsoft just released a tool that lets you convert Office files to Markdown. Never thought I'd see the day.

Google also added Markdown export to Google Docs a few months ago.

github.com/microsoft/markitdown

Cover for the book "Building a Debugger" from No Starch Press. A robot sits at a drafting table drawing a complex machine. In the top-right corner of the table, there is a post-it note with a bug drawn on it and crossed out

The cover for my book on how debuggers work is here!

Preorders are still 25% off: nostarch.com/building-a-d...

4 panel of a comic style drawing. First panel has a T-rex doing a standup comic routine with a speech bubble containing the words "What's the difference between a light bulb and a cybersecurity professional?" Second panel has these words in the speech bubble "A light bulb stops working when it burns out." Third panel has a drawing of sad looking dinosaurs while the fourth panel has the T-rex stand up comedian with tears on its eyes.

This is my annual reminder to y'all wonderful folks in infosec: please take care & you're important. Your physical & mental health are important aspects of your life. The work we do & the environments we work in can significantly impact these. There is no shame in taking care of yourself first.💜

Originally the default wallpaper of Microsoft's Windows XP, this photo shows green rolling hills with a vibrant blue sky and white clouds in the background. Charles O'Rear took the photo in California, USA.

We've always been a fan of blueskies.

Microsoft Boosts Device Security With Windows Resiliency Initiative Microsoft is readying a new release of Windows in 2025 that will have significant security controls such as more resilient drivers and "self-defending" operating system kernel.

"We're ensuring this platform will enable security solution providers to have the access they need to detect and respond to threats without introducing complexity into the kernel,

www.darkreading.com/endpoint-sec...

Binary Ninja - internship-2025 Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.

Want to help build Binary Ninja this summer? Our 2025 summer internship application process is live!

A squirrel perched on a thin tree branch surrounded by yellow leaves, holding a small piece of food in its front paws. The squirrel faces the camera directly, with its bushy tail visible behind it. The background shows a clear blue sky.

Chunky boi

Microsoft using yugioh card on hacker "that's not a security boundary"