Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote Connections (Usenix 2020) - The conceptually novel type of timing attack that leverages the coalescing of packets by network protocols and concurrent handling of requests by applications https://tom.vg/papers/timeless-timing-attack_usenix2020.pdf #exploitation #dukeBarman

Binary Ninja loader for common Nintendo Switch file types https://github.com/EliseZeroTwo/Switch-Binja-Loader #binaryninja #reverse #dukeBarman

Apple's Security Research Device Program was officially launched https://developer.apple.com/programs/security-research-device/ #ios #macos #dukeBarman

7 Days to Lift: A Mission in Microcode Extending the Hex-Rays Decompiler to Support Intel AVX Instructions https://blog.ret2.io/2020/07/22/ida-pro-avx-decompiler/ #reverse #IDA #dukeBarman

Split 64 bits sep-firmware images https://github.com/matteyeux/pysep #ios #dukeBarman

Parse YARA rules and operate over them more easily https://github.com/plyara/plyara #reverse #malware #dukeBarman

DJI ANDROID GO 4 APPLICATION SECURITY ANALYSIS https://www.synacktiv.com/en/publications/dji-android-go-4-application-security-analysis.html #android #reverse #dukeBarman

ARMv8.5-A Memory Tagging Extension (MTE) instructions support is now available in #radare2 https://github.com/radareorg/radare2/commit/1dbe43d #reverse #dukeBarman

Updates on ThiefQuest, the Quickly-Evolving macOS Malware https://blog.trendmicro.com/trendlabs-security-intelligence/updates-on-thiefquest-the-quickly-evolving-macos-malware/ #malware #reverse #macos #dukeBarman

Piercing the Veil: Android Code Deobfuscation https://www.youtube.com/watch?v=lmHkfKXuN4A #reverse #android #obfuscation #dukeBarman

Cutter v1.11 has just been released! 🎉
https://twitter.com/r2gui/status/1286684468602863616

Some of the highlights:

- Major improvements to the graph layout algorithm
- Latest version of radare2 with improved analysis and bug fixes
- New Graph widgets: Function Call-Graph, Global Call-Graph, Import Graph and more
- Support for saving and loading multiple UI layouts for customized user experience
- ...

Developers improved documentation, especially the documentation for new contributors >> https://cutter.re/docs/contributing

#reverse #radare2 #dukeBarman

Code deobfuscation by program synthesis-aided simplification of Mixed Boolean-Arithmetic expressions https://github.com/arnaugamez/tfg Code: https://github.com/arnaugamez/r2syntia #reverse #dukeBarman

Low-Level Process Hunting on macOS https://objective-see.com/blog/blog_0x4A.html #reverse #macos #dukeBarman

Python scripts to help analzye go binaries in radare2. Basically this is a port of the IDA pro script golang_load_assist to r2. https://github.com/f0rki/r2-go-helpers #reverse #radare2 #dukeBarman

Prometei botnet and its quest for Monero https://blog.talosintelligence.com/2020/07/prometei-botnet-and-its-quest-for-monero.html #reverse #malware #dukeBarman

IDA: What’s new in 7.5sp2 https://www.hex-rays.com/products/ida/news/7_5sp2/ #reverse #IDA #dukeBarman

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro to dump in-memory PE files and reconstruct imports. https://github.com/blackberry/pe_tree #reverse #windows #ida #dukeBarman

Binary instrumentation framework based on FRIDA https://github.com/Ch0pin/medusa #reverse #frida #android #dukeBarman

Converts .tag file produced by tiny_tracer to Cutter annotation script https://github.com/Dump-GUY/tiny_tracer_tag_to_cutter #reverse #radare2 #dukeBarman

MMS Exploit Part 3: Constructing the Memory Corruption Primitives https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-3-constructing-primitives.html #reverse #android #exploitation #dukeBarman

Set of antianalysis techniques found in malware https://github.com/hasherezade/antianalysis_demos #reverse #malware #dukeBarman