murks @_murks

Joined January 2017

Tweets

75
Followers

64
Following

297
Likes

153

Vector 35 @vector35

5 years ago

@_murks @BinjaDevs Sure, select the function name and press `y` to change the prototype, including types and argument names.

1 1 1 0 0

murks @_murks

5 years ago

Looking forward to this. Happy to have provided the first step by uncovering CVE-2018-16621 initially. Blogpost ( insinuator.net/2018/11/multip… ) from the initial disclosure was way back in 2018.

Open Security Summit @opensecsummit

5 years ago

Looking forward to this. Happy to have provided the first step by uncovering CVE-2018-16621 initially. Blogpost ( insinuator.net/2018/11/multip… ) from the initial disclosure was way back in 2018.

0 2 3 0 0

Download Image

0 0 1 0 0

Is there a convenient way to rename function parameters from the call site in Binary Ninja? Every time entering the function, changing the parameter name, forgetting the next one, pressing ESC, and repeating the process is tedious. CC @BinjaDevs

1 1 1 0 0

murks @_murks

5 years ago

I released AFL Queue eXplorer afl-qx. It allows you to explore AFL(++) output directories. You can browse the hex dump of single files or view a diff showing the mutations. Can be used to observe the output folder while #fuzzing or post mortem github.com/murx-/afl-qx

0 1 3 0 1

Download Image

murks @_murks

5 years ago

Sneek peek of cstrnfinder Binary Ninja plugin getting a Qt GUI. I really like the MarkdownReport of Binary Ninja, but most of the time, I prefer a side by side view and not the tabbed view.

0 1 4 0 0

Download Image

murks @_murks

5 years ago

Analysis of a heap-based buffer overflow I found in GNU readline. Root cause analysis with rr and some @fridadotre shenanigans for crash amplifications.

Insinuator @Insinuator

5 years ago

Analysis of a heap-based buffer overflow I found in GNU readline. Root cause analysis with rr and some @fridadotre shenanigans for crash amplifications.

0 10 17 0 0

0 4 10 0 1

murks @_murks

5 years ago

Other #SolarWinds news:

Insinuator @Insinuator

5 years ago

Other #SolarWinds news:

1 6 7 0 2

0 1 0 0 0

Dennis @ttdennis

5 years ago

In case you‘re interested in Bluetooth on iOS and some of Apple‘s proprietary BT protocols, I uploaded my thesis to the ToothPicker repo github.com/seemoo-lab/too…

7 58 186 0 24

murks @_murks

5 years ago

Wrote a blog post with some examples of how fuzzers deduplicate crashes and some thoughts on crash bucketing/initial triage of crashes. The next post will go into more detail on manual triaging with rr and some Frida shenanigans.

Insinuator @Insinuator

5 years ago

0 7 11 0 3

0 2 2 0 0

Niklaus Schiess @_takeshix

5 years ago

It is happening again: Advent Calendar of Advanced Cyber Fun 2020 Edition is live: xmas.rip #advent 🥳🥳🤶🧑‍🎄🎅 #xmas featuring. @lod108 @br3zel @sven_to

1 11 11 0 0

Enno Rey @Enno_Insinuator

5 years ago

Reversing C++ - How not the get an heart attack, by @_murks insinuator.net/wp-content/upl… [PDF]

0 8 25 0 4

Download Image

murks @_murks

5 years ago

While writing a blogpost, I found out that the GDB exploitable plugin (github.com/jfoote/exploit…) did not support the newly released GDB 10.1 used in Kali and Arch. It does now. Blogpost with some thoughts on triaging fuzzing bugs follows soon.

0 0 0 0 0

Insinuator @Insinuator

5 years ago

New blog post: Forklift <=3.3.9 and <=3.4 Local Privilege Escalations on macOS (CVE-2020-15349/CVE-2020-27192) insinuator.net/2020/11/forkli…

2 16 15 0 2

murks @_murks

5 years ago

I finally added Ghidra support to devi. You can now devirtualize virtual calls with the help of @vector35's Binary Ninja, @HexRaysSA's IDA, and Ghidra. Currently, @fridadotre is still the only supported DBI. See github.com/murx-/devi

1 14 27 0 10

murks @_murks

5 years ago

I wrote a blogpost about the bugs I found in GNU readline.

Insinuator @Insinuator

5 years ago

I wrote a blogpost about the bugs I found in GNU readline.

0 9 6 0 0

0 3 2 0 0

murks @_murks

5 years ago

Just found out @pwntester took a look at the Nexus Repository Manager vulnerability (CVE-2018-16621) @_schn31d4 and I reported and found a bypass for the fix (securitylab.github.com/advisories/GHS…). He also used CodeQL to perform a Variant Analysis and found more bugs: securitylab.github.com/research/bean-…

0 18 43 0 4

TROOPERS Conference @WEareTROOPERS

6 years ago

We are sad to announce, that we finally decided to cancel the #TR20 main conference as well as the round tables. This also holds for the IoT and IPv6 events and the TelcoSecDay. This decision was taken, even though considerations with local health authorities approve #TR20 (1/3)

23 72 131 0 0

Sonar Research @Sonar_Research

6 years ago

Stay tuned! Tomorrow we open the first door of our Java Security Advent Calendar 2019! 👉 rips.tech/AJAV #java #security #vulnerabilities

0 6 44 0 0

Download Image

Jani Kenttälä @janikenttala

6 years ago

Get things done like @aohelin. 1: agree to give a presentation on how you solved a problem. 2: Solve the problem. 3: Present. #radamsa now available as a library. 🍾 @TarlabOulu #hackafterdark #fuzzing #security