We (Grant H & me) just finished @BlackHatUSA talk on "Emulating Samsung’s Baseband for Security Testing"! Feel free to have a look at our slides over here docs.google.com/presentation/d…

Here are the slides from my BlackHat talk "iOS Kernel PAC, One Year Later", in which I consider how kernel PAC CFI has changed since its introduction in iOS 12 and examine 5 ways to bypass it in iOS 13: bazad.github.io/presentations/…

Here are my slides for my #BlackHat Talk: Breaking Samsung's Root of Trust: Exploiting Samsung S10 Secure Boot github.com/TrapaSecurity/… #BlackHat2020

Attack Secure Boot of SEP raw.githubusercontent.com/windknown/pres…

I'm happy to announce that TinyInst just got a macOS version. This has been fully done by Alexandru Niculae, a Project Zero intern who worked with me during the summer.

🚀 We updated the fuzzer's genealogy! Look at it at: fuzzing-survey.org 🧑‍💻 Do not hesitate to make a PR if you see any fuzzer missing (or mistake in the current DB). ⬇️

车联网攻击面思维脑图

New version of Tamper Chrome under development. Looking for testers :) Known Bugs: - Deleting headers doesn't delete them - You have to scroll to see new requests below Missing Features: - Response interception - Repeating requests github.com/google/tamperc…

Super interesting looking book from VulWar smile.amazon.com/dp/7121289806?… don't think there is an english translation yet

The TinyInst fuzzer is finally here! 🥳 I think it is a good time now to share my TinyInst presentation slides from PoC x Zer0Con. You can find them here: github.com/AlexNiculae/Po…

#libafl is now public! github.com/AFLplusplus/Li… We decided to make it public even without so much documentation so people can start hacking on it. With dmnk.bsky.social s1341 The Hacker's Choice (@[email protected])

The source code for Winnie, our new Windows fuzzer is now publicly released! Please enjoy the new Windows fork-server :D github.com/sslab-gatech/w…

Here are the slides from the "Attacking JavaScript Engines in 2022" talk by itszn and myself offensivecon. It's a high-level talk about JS, JIT, various bug classes, and typical exploitation flows but with lots of references for further digging! saelo.github.io/presentations/…

The slides for the offensivecon talk “Bug Hunting S21's 10ADAB1E FW” of ffmenarini and myself can be found here: dropbox.com/s/2f14ga52jguu… Enjoy! We are still around at the conference so stop by and say hi.

🌟Slides from my offensivecon talk! #itw0days github.com/maddiestone/Co…

Exciting news! My book is finally 100% finished and in production. The release date is scheduled for May 2023! 🥳 I’ll make an official announcement with the exact date and pre-sale links as soon as I get them.

when will Poe support uploading documents for processing, such as translating .docx documents?

👀 woah... Google announces Sec-Gemini v1, a new experimental cybersecurity model security.googleblog.com/2025/04/google…

Introducing GLM-5: From Vibe Coding to Agentic Engineering GLM-5 is built for complex systems engineering and long-horizon agentic tasks. Compared to GLM-4.5, it scales from 355B params (32B active) to 744B (40B active), with pre-training data growing from 23T to 28.5T tokens.