DJI ANDROID GO 4 APPLICATION SECURITY ANALYSIS https://www.synacktiv.com/en/publications/dji-android-go-4-application-security-analysis.html #android #reverse #dukeBarman
Synacktiv
DJI Android GO 4 application security analysis
ARMv8.5-A Memory Tagging Extension (MTE) instructions support is now available in #radare2 https://github.com/radareorg/radare2/commit/1dbe43d #reverse #dukeBarman
GitHub
Fix #17135 - Support Memory Tagging Extension instructions ##anal (#1… · radareorg/radare2@1dbe43d
…7279)
Co-authored-by: phakeobj <phakeobj@users.noreply.github.com>
Co-authored-by: phakeobj <phakeobj@users.noreply.github.com>
Updates on ThiefQuest, the Quickly-Evolving macOS Malware https://blog.trendmicro.com/trendlabs-security-intelligence/updates-on-thiefquest-the-quickly-evolving-macos-malware/ #malware #reverse #macos #dukeBarman
Trend Micro
Updates on Quickly-Evolving ThiefQuest macOS Malware
We discuss our discoveries on ThiefQuest, such as the differences between the old and new versions of the malware, and why we believe ThiefQuest is an example of highly capable malware that should be kept under close monitoring.
Piercing the Veil: Android Code Deobfuscation https://www.youtube.com/watch?v=lmHkfKXuN4A #reverse #android #obfuscation #dukeBarman
YouTube
Piercing the Veil: Android Code Deobfuscation - Caleb Fenton
Presented at Silicon Valley Cyber Security Meetup Talkin' Security Online Event on Thursday, May 7, 2020
Slides can be found at https://drive.google.com/file/d/1QUpMOm1-gzWYLVsmGJrcOHyea2e0X93z
Summary of the Talk: Android malware analysts often encounter…
Slides can be found at https://drive.google.com/file/d/1QUpMOm1-gzWYLVsmGJrcOHyea2e0X93z
Summary of the Talk: Android malware analysts often encounter…
Cutter v1.11 has just been released! 🎉
https://twitter.com/r2gui/status/1286684468602863616
Some of the highlights:
- Major improvements to the graph layout algorithm
- Latest version of radare2 with improved analysis and bug fixes
- New Graph widgets: Function Call-Graph, Global Call-Graph, Import Graph and more
- Support for saving and loading multiple UI layouts for customized user experience
- ...
Developers improved documentation, especially the documentation for new contributors >> https://cutter.re/docs/contributing
#reverse #radare2 #dukeBarman
https://twitter.com/r2gui/status/1286684468602863616
Some of the highlights:
- Major improvements to the graph layout algorithm
- Latest version of radare2 with improved analysis and bug fixes
- New Graph widgets: Function Call-Graph, Global Call-Graph, Import Graph and more
- Support for saving and loading multiple UI layouts for customized user experience
- ...
Developers improved documentation, especially the documentation for new contributors >> https://cutter.re/docs/contributing
#reverse #radare2 #dukeBarman
X (formerly Twitter)
Cutter (@cutter_re) on X
Cutter v1.11 has just released with many surprises! 🎉
We significantly improved the graph layout, introduced Global and Function Call-Graphs, added support for saving and loading your own UI layouts, and much more.
Download and give it a try --> https:…
We significantly improved the graph layout, introduced Global and Function Call-Graphs, added support for saving and loading your own UI layouts, and much more.
Download and give it a try --> https:…
Code deobfuscation by program synthesis-aided simplification of Mixed Boolean-Arithmetic expressions https://github.com/arnaugamez/tfg Code: https://github.com/arnaugamez/r2syntia #reverse #dukeBarman
GitHub
GitHub - arnaugamez/tfg: A copy of my Mathematics and Computer Engineering B.Sc. thesis
A copy of my Mathematics and Computer Engineering B.Sc. thesis - arnaugamez/tfg
Python scripts to help analzye go binaries in radare2. Basically this is a port of the IDA pro script golang_load_assist to r2. https://github.com/f0rki/r2-go-helpers #reverse #radare2 #dukeBarman
GitHub
GitHub - f0rki/r2-go-helpers: [UNMAINTAINED] python scripts to help analzye go binaries in radare2
[UNMAINTAINED] python scripts to help analzye go binaries in radare2 - f0rki/r2-go-helpers
Prometei botnet and its quest for Monero https://blog.talosintelligence.com/2020/07/prometei-botnet-and-its-quest-for-monero.html #reverse #malware #dukeBarman
Cisco Talos Blog
Prometei botnet and its quest for Monero
NEWS SUMMARY
* We are used to ransomware attacks and big-game hunting making the headlines, but there are still methods adversaries use to monetize their efforts in less intrusive ways.
* Cisco Talos recently discovered a cryptocurrency-mining botnet attack…
* We are used to ransomware attacks and big-game hunting making the headlines, but there are still methods adversaries use to monetize their efforts in less intrusive ways.
* Cisco Talos recently discovered a cryptocurrency-mining botnet attack…
IDA: What’s new in 7.5sp2 https://www.hex-rays.com/products/ida/news/7_5sp2/ #reverse #IDA #dukeBarman
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro to dump in-memory PE files and reconstruct imports. https://github.com/blackberry/pe_tree #reverse #windows #ida #dukeBarman
GitHub
GitHub - blackberry/pe_tree: Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can…
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports. - blackb...
Binary instrumentation framework based on FRIDA https://github.com/Ch0pin/medusa #reverse #frida #android #dukeBarman
GitHub
GitHub - Ch0pin/medusa: Mobile Edge-Dynamic Unified Security Analysis
Mobile Edge-Dynamic Unified Security Analysis. Contribute to Ch0pin/medusa development by creating an account on GitHub.
Converts .tag file produced by tiny_tracer to Cutter annotation script https://github.com/Dump-GUY/tiny_tracer_tag_to_cutter #reverse #radare2 #dukeBarman
GitHub
GitHub - Dump-GUY/tiny_tracer_tag_to_cutter
Contribute to Dump-GUY/tiny_tracer_tag_to_cutter development by creating an account on GitHub.
MMS Exploit Part 3: Constructing the Memory Corruption Primitives https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-3-constructing-primitives.html #reverse #android #exploitation #dukeBarman
Blogspot
MMS Exploit Part 3: Constructing the Memory Corruption Primitives
Posted by Mateusz Jurczyk, Project Zero This post is the third of a multi-part series capturing my journey from discovering a vulnerable...
Set of antianalysis techniques found in malware https://github.com/hasherezade/antianalysis_demos #reverse #malware #dukeBarman
GitHub
GitHub - hasherezade/antianalysis_demos: Set of antianalysis techniques found in malware
Set of antianalysis techniques found in malware. Contribute to hasherezade/antianalysis_demos development by creating an account on GitHub.
Find ioctls in binaries (For IDA 7.5 and Python3 ) https://gist.github.com/uf0o/011cedcae3f52102c69c7d8c28ae678c #ida #reverse #dukeBarman
Gist
find_ioctls.py
GitHub Gist: instantly share code, notes, and snippets.
Introduction to symbolic execution with KLEE https://www.youtube.com/watch?v=z6bsk-lsk1Q #reverse #smt #newbie #dukeBarman
YouTube
Introduction to symbolic execution with KLEE
Follow David on Twitter @Davkorcz: https://twitter.com/Davkorcz
Follow us on Twitter: @ADALogics at https://twitter.com/ADALogics
This video gives an introduction to the KLEE symbolic execution engine.
The video shows how to install KLEE using the Docker…
Follow us on Twitter: @ADALogics at https://twitter.com/ADALogics
This video gives an introduction to the KLEE symbolic execution engine.
The video shows how to install KLEE using the Docker…
Flipper Zero — Tamagochi for Hackers - https://www.kickstarter.com/projects/flipper-devices/flipper-zero-tamagochi-for-hackers/description #hardware #dukeBarman
Kickstarter
Flipper Zero — Multitool for Hackers
Open source multi-tool device for researching and pentesting radio protocols, access control systems, hardware, and more.
One Byte to rule them all - The new iOS kernel exploitation technique that turns a one-byte controlled heap overflow directly into a read/write primitive https://googleprojectzero.blogspot.com/2020/07/one-byte-to-rule-them-all.html #exploitation #ios #dukeBarman
Blogspot
One Byte to rule them all
Posted by Brandon Azad, Project Zero One Byte to rule them all, One Byte to type them, One Byte to map them all, and in userspace bind...