r0 Crew (Channel)

2021-03-17 22:18:04 One day short of a full chain: Part 2 - Chrome sandbox escape

https://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx

#reverse #expdev #browser #chrome #sandbox #escape #darw1n Open / Comment

2021-03-15 12:00:27 VM Detection Tricks, Part 1: Physical memory resource maps

In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021. These detection tricks will be focused on 64-bit Windows 10 or Windows Server 2019 guests, targeting a variety of VM platforms.

https://labs.nettitude.com/blog/vm-detection-tricks-part-1-physical-memory-resource-maps/

#reverse #detect #vm #malware #redteam #darw1n Open / Comment

2021-03-14 11:31:01 CVE-2021-27365: Linux kernel LPE Exploit. Now with symbols for the latest RHEL8 kernel. Get it while it's still an 0day!

Github: https://github.com/grimm-co/NotQuite0DayFriday/tree/trunk/2021.03.12-linux-iscsi

The following report discloses three distinct vulnerabilities discovered by GRIMM while researching the Linux kernel. The first vulnerability is a heap buffer overflow, the second is a kernel pointer leak, and the third is an out-of-bounds kernel memory read. All three vulnerabilities are associated with the iSCSI subsystem.

Article: https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html?m=1

#reverse #lpe #heap #bof #expdev #linux #darw1n Open / Comment

2021-03-13 10:30:14 Playing in the (Windows) Sandbox: A Windows Sandbox deep dive.

https://research.checkpoint.com/2021/playing-in-the-windows-sandbox/

#reverse #hyperv #sandbox #internals #darw1n Open / Comment

2021-03-13 10:29:01 Hyper-V debugging for beginners (2nd edition)

https://hvinternals.blogspot.com/2021/01/hyper-v-debugging-for-beginners-2nd.html

#reverse #hyperv #internals #darw1n Open / Comment

2021-03-13 10:29:01 Hyper-V memory internals. EXO partition memory access

https://hvinternals.blogspot.com/2020/06/hyper-v-memory-internals-exo-partition.html

#reverse #hyperv #internals #darw1n Open / Comment

2021-03-13 10:29:01 Hyper-V memory internals. Guest OS memory access

https://hvinternals.blogspot.com/2019/09/hyper-v-memory-internals-guest-os-memory-access.html

#reverse #hyperv #internals #darw1n Open / Comment

2021-03-10 14:37:03 Rizin and Cutter have been selected for Google Summer of Code 2021! Great opportunity for students to work with developer's teams, write code and learn about open-source! https://summerofcode.withgoogle.com/organizations/5718117306597376/ #reverse #rizin #opensource #dukeBarman Open / Comment

2021-03-08 15:26:19 Flowers and chocolate cannot do what the words of love can.

Every woman in our lives is unique and beautiful.

The power of they have inside is enormous.

They are stronger than anyone can imagine.

And we all know that this world would mean nothing without a woman.

So, on this special day we have an amazing opportunity to thank all of them!

Thank you for making life possible, thank you for being so different and strong!

Happy Women’s Day! Open / Comment

2021-03-04 17:07:33 https://github.com/PositiveTechnologies/ghidra_nodejs

GHIDRA plugin to parse, disassemble and decompile NodeJS Bytenode (JSC) binaries

#ghidra #decompiler #nodejs #reverse #DrMefistO Open / Comment