16-20 сентября, в Самаре, пройдет финал уже традиционного крупнейшего международного оффлайн CTF-соревнования #VolgaCTF.

Помимо самого соревнования планируются лекции, от экспертов ИБ из крупнейших компаний России, Бельгии и Румынии.

Вход свободный, рекомендуем к посещению!
⁠
https://xn--r1a.website/volgactf ⬅️

#ctf #events

Канал с вакансиями от форума r0 и сайта hh.ru.

Тематика: Reverse Engineering, Malware Research, Pentest.

В дальнейшем, вероятно, появится информация еще и с зарубежных ресурсов. Все что будет касаться "удалённой работы" и "релокации".

https://xn--r1a.website/r0_jobs

#job #cv #vacancy

Канал с разовыми оплачиваемыми задачами с форума r0. Позже, вероятно, подвяжем и другие форумы.

https://xn--r1a.website/joinchat/AAAAAFIVdiqMn_Pv9vVE0A

#job #tasks

Dynamic Instrumentation: Frida And r2frida For Noobs https://bananamafia.dev/post/r2frida-1/ #radare2 #reverse #frida #dukeBarman

SVD-Loader for Ghidra: Simplifying bare-metal ARM reverse engineering https://github.com/leveldown-security/SVD-Loader-Ghidra #reverse #ghidra #dukeBarman

A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU https://github.com/andreafioraldi/WineAFLplusplusDEMO #fuzzing #dukeBarman

Frida 12.7 is out with a brand new CModule API, and ~100x faster ObjC.choose()

https://frida.re/news/2019/09/18/frida-12-7-released/ #re #mobile #darw1n

Extracting type-information from a Go binary

https://lekstu.ga/posts/extracting-go-types/

#golang #internals #darw1n

CVE-2019-8038 & CVE-2019-8039 : Details about vulns in Adobe Acrobat/Reader

https://starlabs.sg/advisories/19-8038/
https://starlabs.sg/advisories/19-8039/

#re #uaf #expdev #darw1n

Automatic Hooking/Patching for Spotify on MacOS

https://medium.com/swlh/skiptracing-automated-hook-resolution-74eda756533d

#re #hook #capstone #ida #darw1n

Bug bounty writeups published from 2012 to 2019

https://pentester.land/list-of-bug-bounty-writeups.html#bug-bounty-writeups-published-in-2019

#re #expdev #pentest #web #bounty #writeups #darw1n

Hey, friends! We have good news. Many of you have been waiting for this for a long time. Finally, we had opened the English speak only chat:

https://xn--r1a.website/r0_chat ⬅️

#english #community

Malware Analysis 101 - Basic Static Analysis https://medium.com/bugbountywriteup/malware-analysis-101-basic-static-analysis-db59119bc00a #malware #reverse #dukeBarman

Hex-Rays Plugin Contest Results 2019 https://hex-rays.com/contests/2019/ #ida #reverse #dukeBarman

#Ghidra 9.1 BETA was released https://www.ghidra-sre.org/releaseNotes_9.1.html #reverse #dukeBarman

"Visual Basic 5/6 compiler memory leak inside created executable files" https://sysenter-eip.github.io/VBParser #exploit #dukeBarman

axi0mX introduced update for own utility ipwndfu (open-source jailbreaking tool for older iOS devices) with new exploit - checkm8 (read "checkmate"), a permanent unpatchable bootrom exploit for most iOS devices (A5-A11 chip) #exploit #ios #dukeBarman

Black Hat USA 2019 https://www.youtube.com/playlist?list=PLH15HpR5qRsWrfkjwFSI256x1u2Zy49VI #videos #conference #blackhat #dukeBarman

Developer of Checkm8 explains why iDevice jailbreak exploit is a game changer (interview with axi0mX) https://arstechnica.com/information-technology/2019/09/developer-of-checkm8-explains-why-idevice-jailbreak-exploit-is-a-game-changer/ #exploit #ios #dukeBarman

#ZeroNights 2019 HackQuest starts on October 6 https://hackquest.zeronights.org/! ZeroNights HackQuest is a hacking challenge before the annual ZeroNights conference. The goal is to solve tasks related to information security, including reverse engineering, web, mobile hacking, penetration testing, and more. Details: https://zeronights.ru/news-en/zeronights-hackquest-starts-on-october-6-2019/ #CTF #dukeBarman

Cutter: Presenting r2ghidra Decompiler https://www.youtube.com/watch?v=eHtMiezr7l8 #reverse #ghidra #radare2 #r2con #dukeBarman