CFP for ZeroNights 2018 launched today https://2018.zeronights.org/ (November 20-21, Saint-Petersburg, Russia)

https://github.com/sibears/HRAST - this is simple PoC that allows you to define AST pattern you want to process and make some actions with them

Current code contains templates for:

1. Replacing inlined strlen called on global variable

2. Auto renaming globals in expressions like global_var = func(arg1, "newglobalname")

3. Auto renaming structure fields like glob_str.f0 = sub_cafebabe to glob_str.sub_cafebabe = sub_cafebabe #ida #hexrays #reverse #darw1n

https://github.com/angr/heaphopper #angr #dukeBarman

http://malwareanalysis.tools/ #malware #KosBeg

Radare2 is on DEFCON CTF page https://www.defcon.org/html/defcon-26/dc-26-ctf.html #radare2 #jeisonwi

https://github.com/ionescu007/r0ak #windows #jeisonwi

Sourcetrail 2018.3 is released! https://www.sourcetrail.com/blog/release_2018_3/ #codereview #dukeBarman

radare2-2.8 - codename OliveDealer has been released! https://github.com/radare/radare2/releases/tag/2.8.0 #radare2 #reverse

Video from The Circle of HOPE 2018 https://livestream.com/internetsociety2/hope #conference #videos #dukeBarman

Miasm2 https://i.blackhat.com/us-18/Wed-August-8/us-18-DesclauxMougey-Miasm-Reverse-Engineering-Framework.pdf #slides #blackhat #dukeBarman

https://github.com/xoreaxeaxeax/rosenbridge #jeisonwi

На последней встрече DEFCON Russia нf кораблике был доклад про dведение в атаки по сторонним каналам на микроархитектуру, основанные на исполнении кода. Но из-за ограничений на время, в докладе совсем не раскрывались существующие митигейшены (секцию вопрсов и ответов не берем в расчет). На последнем BlackHat USA 2018 был доклад от Microsoft на эту тему, так что если кому интресно https://github.com/Microsoft/MSRC-Security-Research/blob/master/presentations/2018_08_BlackHatUSA/us-18-Fogh-Ertl-Wrangling-with-the-Ghost-An-Inside-Story-of-Mitigating-Speculative-Execution-Side-Channel-Vulnerabilities.pdf #Qu3b3c

https://www.youtube.com/watch?v=zLIaJBqcjNI&index=3&list=PLhbhmdpDp9xEeO6E-ihfqqt8nycOP4S8r хочу поделиться ссылкой. это самое офигительное видео которое я когда-либо смотрел. правда не новое, поэтому вы уже могли его видеть #re #afiskon

http://radare.today/posts/type_inference/ #radare2 #jeisonwi

http://radare.today/posts/gsoc_2018_radeco_cfs #jeisonwi

http://radare.today/posts/gsoc_2018_radeco_pseudo_c_code_generation #jeisonwi

VirtualBox VRDP Guest-to-Host Escape
EN: https://blogs.securiteam.com/index.php/archives/3736
RU: https://forum.reverse4you.org/showthread.php?p=14351
#expdev #darw1n

Reversing a Japanese Wireless SD Card - From Zero to Code Execution https://docs.google.com/presentation/d/13OJNOb2IMwp79SDrbxSLF3i7StTgWLdD7QlYpic39r8/edit #BHUSA #radare2 #reverse

http://radare.today/posts/cutter_debug/ #radare2 #reverse #jeisonwi

Syzbot and the tale of thousand kernel bugs https://events.linuxfoundation.org/wp-content/uploads/2017/11/Syzbot-and-the-Tale-of-Thousand-Kernel-Bugs-Dmitry-Vyukov-Google.pdf #linux #dukeBarman