ceax @_ceax

embedded systems, ICS, IoT... Joined January 2019

Tweets

204
Followers

313
Following

156
Likes

156

Ledger Donjon @DonjonLedger

3 years ago

Last week, we presented our research on Intel Wi-Fi chips at @sstic. Our talk and our slides are now available: sstic.org/2022/presentat…. It features a demo of a DMA attack from the Wi-Fi chip! We also published our tools to interact with some Intel chips: github.com/Ledger-Donjon/…

0 24 54 0 9

Download Image

Silent Signal @SilentSignalHU

4 years ago

We wanted to create snapshot fuzzing demo. We also like challenges. So we chose a browser as the target :) You can find out what can go wrong from our latest blog post: Fuzzy Snapshots of Firefox IPC -blog.silentsignal.eu/2021/10/14/fuz…

1 26 80 0 18

Download Image

Unicorn Engine @unicorn_engine

4 years ago

Super excited to release Unicorn2 beta to public! Important features: - Backward compatible with Unicorn 1.0.3 - Support latest instruction set of all existing archs - Add 2 new archs in PPC & RISCV - More optimization More info at unicorn-engine.org/Unicorn2-beta

2 60 140 0 2

Cyber Saiyan | RomHack Conference, Training, Camp @cybersaiyanIT

4 years ago

Nicolas Delhaye @_Homeostasie_ & Flavian Dola @_ceax "Making your own Stuxnet: Exploiting New Vulnerabilities and Voodooing PLCs" 🎞️ youtu.be/9PGyOyJTbrE 📜 drive.google.com/file/d/1_N0GEy… (2.6MB) 💥 demos drive.google.com/file/d/1aDiPR-… (32.6MB)

1 1 5 0 0

Jens Wiesner ([email protected]) @jensweidraussen

4 years ago

Kudos to @_ceax & @_Homeostasie_ from @AirbusCyber for showing that #Stuxnet is still possible by "Exploiting New Vulnerabilities and Voodooing PLCs" [#RomHack2021]. You put impressive work into that. m.youtube.com/watch?t=19664&…

0 7 7 0 1

Airbus Defence and Space Cyber @AirbusCyber

4 years ago

Remote Code Execution (RCE) on the ABB #ICS system: “System 800xA SoftController” (CVE-2020-24672). This vulnerability could allow attackers to take remote control of the ABB engineering station. Details by @_ceax & @_Homeostasie_ at 3:40pm: bit.ly/3hDHE6N

0 5 4 0 1

Download Image

Airbus Defence and Space Cyber @AirbusCyber

4 years ago

At #RomHack2021, @_ceax & @_Homeostasie_ will demonstrate how one can gain remote control over some industrial devices exploiting several new #CVEs they discovered. They will explain how to reproduce key stages of a #Stuxnet -like attack. Live stream ➡️ bit.ly/2XqWk1u

0 5 13 0 0

Download Image

Nicolas D @_Homeostasie_

4 years ago

Happy to present with my workmate @_ceax our vulnerability research around #ICS at the #RomHack2021 conference on September 25th. 🙂 "Making your own Stuxnet: Exploiting New Vulnerabilities and Voodooing PLCs" ➡️ romhack.io/speakers-2021.…

Cyber Saiyan | RomHack Conference, Training, Camp @cybersaiyanIT

4 years ago

2 34 67 0 2

Download Image

0 3 10 0 0

Airbus Security Lab @AirbusSecLab

4 years ago

You liked Stéphane's blog posts on QEMU? (airbus-seclab.github.io/qemu_blog/) Join him tomorrow for this free @hardwear_io Webinar.

hardwear.io @hardwear_io

4 years ago

You liked Stéphane's blog posts on QEMU? (airbus-seclab.github.io/qemu_blog/) Join him tomorrow for this free @hardwear_io Webinar.

0 4 10 0 0

Download Image

0 13 30 0 3

Airbus Defence and Space Cyber @AirbusCyber

4 years ago

Présentation par @_ceax de l’outil github.com/airbus-cyber/a… permettant de fuzzer des binaires via AFL++ et l’émulateur de #Ghidra. Projet visant à être une alternative à afl_unicorn pour les architectures #CPU non supportées (Xtensa, ppc…): static.sstic.org/rumps2021/SSTI…

0 2 5 0 0

ceax @_ceax

4 years ago

[Tool] Fuzz exotic arch with AFL using Ghidra emulator with code coverage Ex: Fuzzing Xtensa binary code (#esp32) Blog: airbus-cyber-security.com/fuzzing-exotic… Github: github.com/airbus-cyber/a… #GHIDRA #AFLplusplus

4 121 314 0 36

Download Gif

Alexa Chenowith @AlexaChenowith

5 years ago

Inside SimpliSafe Alarm System medium.com/tenable-techbl…

0 3 2 0 0

Nicolas Krassas @Dinosn

5 years ago

Reverse Engineering Testo Saveris2 firmware jon-cederqvist.medium.com/reverse-engine…

0 5 20 0 2

h0mbre @h0mbre_

5 years ago

i tried to make a beginner-friendly post about some of the basics related to code coverage in fuzzing, just going over terminology, common strats, and some tooling. hopefully this will be useful for some! h0mbre.github.io/Fuzzing-Like-A…

4 174 502 0 130

ceax @_ceax

5 years ago

[New Post] Here is my write-up on my RCE affecting Schneider Electric ControlExpert by chaining 3 #0day: #CVE-2020-28211 CVE-2020-28212 CVE-2020-28213 Find out how to bypass project protection, hijacking UMAS session, and inject bytecode into PLC simulator airbus-cyber-security.com/remote-code-ex…

0 8 10 0 0

Download Image

Airbus Defence and Space Cyber @AirbusCyber

5 years ago

LIVE TODAY AT 2PM CET: @_Homeostasie_ & @_ceax, #Vulnerability Researchers, will present at #GreHack20. Livestream available at youtu.be/Q5TpkHvPFqw w/ @GrehackConf

0 2 1 0 0

Download Image

ceax @_ceax

5 years ago

Fixes available for my RCE on Schneider Electric EcoStruxure Control Expert (CVE-2020-28211, CVE-2020-28212, CVE-2020-28213). More details in my blog post will be coming soon... cert.ssi.gouv.fr/avis/CERTFR-20… se.com/ww/en/download…

0 2 3 0 0

GreHack @GrehackConf

5 years ago

Hey folks, One day/one talk 1 First speakers are Nicolas Delhaye and Flavian Dola with their talk "Vulnerability Research: A full chained exploit from IT network to PLC’s unconstrained code execution".