Intel Hardware Shield deep dive: part 1 is user-mode System Management Mode (ISRD). tandasat.github.io/blog/2024/02/2… ISRD is beautifully architected, and I have enjoyed studying it a lot. Excellent work by Intel.

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE :

Few people realize Apple has quietly patented an AirPod capable of detecting electrical signals from brain activity and extracting features. Millions of neural-tech I/O devices may be hitting the markets sooner than we think

Compilers, linkers, JITs and assemblers Internals (focus on software security hardening) Low-Level Software Security for Compiler Developers: llsoftsec.github.io/llsoftsecbook/ #compilers #cybersecurity

Decided to publish PPPwn early. The first PlayStation 4 Kernel RCE. Supporting FWs upto 11.00. github.com/TheOfficialFlo…

JTAG Hacking with a Raspberry Pi - Introducing the PiFex : voidstarsec.com/blog/jtag-pifex

Here is our slides for Zer0con 2024, Escaping the Sandbox (Chrome and Adobe Pdf Reader) on Windows sites.google.com/site/zhiniangp…

Haven't played CTF and V8 for a while, but recently solved the V8 SBX challenge in the HITCON CTF. This is my write-up: mem2019.github.io/jekyll/update/…

How to Build an FPV Combat Drone to Defend Your Country : medium.com/illumination-c…

I was curious about how the Linux kernel implements RCU, so I analyzed the source code to understand the execution flow. Feel free to check it out and let me know if you find any mistakes.🙂 u1f383.github.io/linux/2024/09/…

SIMurai is software that emulates a SIM card, which helps in fuzzing modem firmware for vulnerabilities or testing SIM spyware. 🚗📡🔨 Connected cars included :) Research Paper: usenix.org/system/files/u… Presentation: usenix.org/system/files/u… Source code: github.com/tomasz-lisowsk…

🔥

Debugging the Windows Hypervisor and dissecting Secure Kernel calls – my latest blog post takes you through the process, step-by-step. dor00tkit.github.io/Dor00tkit/post… #Hyperv #ReverseEngineering

Dropped my slide for POC2024 on Linux kernel exploitation, including a journal from Pwn2Own Vancouver earlier this year. Enjoy 🙂. u1f383.github.io/slides/talks/2…

Happy New Year! We spent some time backing up most of the CTF challenges for 2024 (there are bound to be incomplete cases) The attachments and title descriptions we have compiled and some writeup. Now We open it to the community. hope it can help u r3kapig-not1on.notion.site/2024-6ad9c7554…

This tiny team tricked Silicon Valley: Overhyped their AI Reached $2 BILLION valuation Invited to elite tech conferences Created mass panic among developers But one software engineer spotted a fatal flaw—and everything unraveled. Here's the outrageous story:🧵

Here is our 0day for kernelCTF🩸 - 82k bounty - quickest submission ever - all instances pwned😎 syst3mfailure.io/rbtree-family-… Disclaimer: We apologize for abusing the red black tree family. Turning grandparents against grandchildren is only acceptable in the context of pwn😤

【The official website of the ICC2025 is OPEN】 We have launched our website of the International Cybersecurity Challenge TOKYO 2025. Please visit us to find out the latest information about the ICC2025. icctokyo2025.nisc.go.jp/en/ #icctokyo2025

Introduction to Snapshot Fuzzing concepts fuzzinglabs.com/state-of-linux… #infosec #fuzzing

Chinese scientists have developed the best shortest-path algorithm in 41 years! A team from Tsinghua University has broken Dijkstra’s “sorting barrier” — the first improvement since 1984. The new algorithm runs in O(m \log^{2/3} n) time. Potential applications? Faster shorter