0xAb

the recording of my talk "Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM Firmware" is online!

I had an absolute blast speaking and being at
@re-verse.io, so many great talks and hallway discussions

How does the Linux Kernel start a Process Stack smashing: How Linux creates the stack and runs a program. Then mess with it.

How the linux kernel starts a process

iq.thc.org/how-does-lin...

Really great read by @h0mbre (on X) about his journey to exploit a Linux n-day on kCTF. Not only the exploit but the process to understand the bug including own failures, e.g. deal with CONFIG_DEBUG_LIST, is full of insights. h0mbre.github.io/Patch_Gappin...

TALK: Musing from Decades of Linux Kernel Security Research // Joshua J. Drake The Linux Kernel powers billions of devices across industries, making it critical infrastructure. But is it secure? Josh explores this by comparing its security investments to a typical SDLC, sharing ...

I'm giving a talk at BOOTSTRAP25 in Austin! Hope to see y'all there! ringzer0.training/bootstrap25-...

Evil Never Sleeps: When Wireless Malware Stays On After Turning Off iPhones

paper: arxiv.org/pdf/2205.06114
code: github.com/seemoo-lab/i...
github.com/seemoo-lab/f...

TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution

Code github.com/compsec-snu/...
paper arxiv.org/abs/2406.08719

Interesting paper by Erin Avllazagaj to automatically find Linux kernel objects being potentially useful for privilege escalation, tool is called SCAVY. www.usenix.org/system/files...

Reverse Engineering iOS 18 Inactivity Reboot Wireless and firmware hacking, PhD life, Technology

How does the new iOS inactivity reboot work? What does it protect from?

I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.

naehrdine.blogspot.com/2024/11/reve...

Advanced Fuzzing With LibAFL @ Ekoparty 2024 Advanced Fuzzing With LibAFL Dominik Maier Ekoparty 2024-11-15 1

Slides for my @ekoparty talk "Advanced Fuzzing
With LibAFL"
- >
docs.google.com/presentation...

Amen to that, although its still lacking some of the good material/discussions around reversing and vulnerability research that I used to find on twitter in the past.

The cost of a NAND chip off attack is 170.87€

www.errno.fr/NAND_chip_of...

code repo: github.com/xairy/lights...
slides: docs.google.com/presentation...