vp @_vepe

Joined October 2020

Tweets

121
Followers

277
Following

461
Likes

3K

offensivecon @offensive_con

2 years ago

Don't forget to submit your talks to our CFP. The sooner the better! cfp.offensivecon.org/offensivecon24…

1 26 35 14K 5

Blue Frost Security @bluefrostsec

2 years ago

Slides and PoC for our Ekoparty presentation "I'm High" by @NicoEconomou: labs.bluefrostsecurity.de/windows-system…

0 44 79 14K 21

Peter Winter-Smith @peterwintrsmith

2 years ago

Today I am pleased to announce the release of a code analyser I’ve been working in my free time - wSAST (wsast.co.uk) wSAST aims to make code analysis easier for application security consultants by providing tools to graph relationships, find paths between functions,…

14 161 438 98K 173

Blue Frost Security @bluefrostsec

2 years ago

CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver by @dialluvioso_ and @esanfelix labs.bluefrostsecurity.de/blog/cve-2023-…

0 50 128 22K 35

Blue Frost Security @bluefrostsec

2 years ago

Revisiting CVE-2017-11176: Introduction to Android/Linux kernel exploitation by @Firzen14 labs.bluefrostsecurity.de/revisiting-cve…

1 39 113 27K 52

Jonas L @jonasLyk

3 years ago

Presenting D-Generate , syscall tracing as its supposed to be! raw.githubusercontent.com/jonaslyk/temp/… usage: dg cmd.exe - displays all syscalls done by process with cmd.exe as imagefile. dg 4736 - by pid 4736 dg - just everything example of recording: raw.githubusercontent.com/jonaslyk/nt/ma…

17 239 785 0 206

Download Image

vp @_vepe

3 years ago

Along with the techniques, we are also publishing a windbg js extension that exports various internal structures of segment heap useful for exploit development: github.com/vp777/exploit-…

Blue Frost Security @bluefrostsec

3 years ago

Along with the techniques, we are also publishing a windbg js extension that exports various internal structures of segment heap useful for exploit development: github.com/vp777/exploit-…

0 85 237 0 49

0 31 71 0 22

Blue Frost Security @bluefrostsec

3 years ago

New blog post released! Windows Segment Heap: Attacking the VS Allocator by @_vepe labs.bluefrostsecurity.de/blog.html/2022…

0 85 237 0 49

Maxim Goryachy @h0t_max

3 years ago

Today we've published Intel Microcode decryptor! It gives you an amazing opportunity for researching x86 platforms. You can understand how Intel mitigated spectre vulnerability, explore the implementation of Intel TXT, SGX,VT-x technologies! Enjoy it! github.com/chip-red-pill/…

24 784 2K 0 361

Download Image

Jann Horn - [email protected] @tehjh

3 years ago

here's a proof of concept (with really shoddy reliability) for that watch_queue OOB write (git.kernel.org/linus/c993ee0f…): bugs.chromium.org/p/project-zero… uses the OOB write to clobber the "/" at the start of the ELF interpreter path of an in-progress setuid exec to make it a relative path

1 28 109 0 12

Connor McGarr @33y0re

3 years ago

Today I am releasing the final post of a 3 part series on “modern” browser exploitation targeting Windows. In this post we port our exploit primitives to Edge itself & combine 12 ROP chains in order to defeat ACG, CIG, DEP, ASLR, CFG, "no child processes" connormcgarr.github.io/type-confusion…

9 209 612 0 183

CloudBreach @Cloud_Breach

3 years ago

It's Launch Day for #CloudBreach! Register for #BreachingAzure Lab and get 25% discount code using the promo code "LAUNCHDAY25". #BreachingAzure challenges students to utilise the latest offensive techniques in a realistic hybrid environment. Are you ready to breach the cloud?

0 21 7 0 1

Ian Beer @i41nbeer

4 years ago

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists, activists and dissidents around the world. googleprojectzero.blogspot.com/2021/12/a-deep…

57 2K 4K 0 652

James Forshaw @tiraniddo

4 years ago

"Can you still relay authentication in a Windows domain if NTLM is disabled?", I asked myself. "Perhaps I should research that" I said. Here's a blog post about what I found out. googleprojectzero.blogspot.com/2021/10/using-…

11 420 911 0 162

Andrey Konovalov @andreyknvl

4 years ago

Memory tagging is coming to kill all of your favorite Linux kernel exploits. I'll be premiering my "Mitigating Linux kernel memory corruptions with Arm Memory Tagging" LSS talk on YouTube in 24 hours. Please join in! I'll be in chat to answer questions. youtube.com/watch?v=UwMt0e…

6 111 495 0 84

Download Image

Thijs Alkemade @xnyhps

4 years ago

We have published the details of our Zoom exploit in this quite long writeup: sector7.computest.nl/post/2021-08-z… tl;dr: heap buffer overflow when handling key exchange messages for chat encryption.