Working With Ghidra P-Code To Identify Vulnerable Function Calls https://www.riverloopsecurity.com/blog/2019/05/pcode/ #ghidra #dukeBarman

A set of Linux binary exploitation tasks for beginners https://github.com/xairy/easy-linux-pwn #exploit #dukeBarman

https://github.com/radare/radare2/releases/tag/3.5.0 #radare2 #jeisonwi

Overcoming fear: reversing with radare2 https://conference.hitb.org/hitbsecconf2019ams/materials/D1T3%20-%20Reversing%20with%20Radare2%20-%20Arnau%20Gamez%20Montolio.pdf #radare2 #reverse #dukeBarman

ANBU - Automatic New Binary Unpacker with PIN DBI Framework https://github.com/Fare9/ANBU #reverse #pin #dukeBarman

GDB 8.3 Debugger Brings RISC-V, Terminal Styling, C++ Injection, IPv6 Connections https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=gdb/NEWS;hb=gdb-8.3-release #debugger #dukeBarman

All the slides for #HITB2019Ams https://conference.hitb.org/hitbsecconf2019ams/materials/ #conference #HITB #dukeBarman

New class of speculative execution vulnerability: MDS (Microarchitectural Data Sampling) is a hardware vulnerability which allows unprivileged speculative access to data which is available in various CPU internal buffers.

RIDL and Fallout: MDS attacks

"Intro": https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html
Official site: https://mdsattacks.com/
Patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa4bff165070dc40a3de35b78e4f8da8e8d85ec5

#hardware #exploit #dukeBarman

Plugin for Ghidra to assist reversing Golang binaries https://github.com/felberj/gotools #reverse #ghidra #dukeBarman

Уязвимости спекулятивного исполнения в современных процессорах свалились как снег на голову, но, кажется, худшее уже позади🙂

Хотя атаки типа Spectre и останутся с нами навсегда, чтобы уберечь нас от таких уязвимостей Intel CPU как Meltdown и Foreshadow, были внедрены различные меры. В свою очередь, разработчики браузеров внедрили изоляцию процессов, а у Intel даже есть кремниевые исправления в своих последних CPU.

Вы чувствуете себя в безопасности? 😈

Себастьян Остерлунд и Стефан Ван Шейк, члены исследовательской группы VUSec, выступят с подробным докладом о новых уязвимостях Intel на OFFZONE 2019.
#ridl #mds

Подробнее: https://offzone.moscow/ru/news/sebastian-sterlund-and-stephan-van-schaik-will-give-an-in-depth-talk-on-the-intel-s-new-vulnerabilit/

https://github.com/0ffffffffh/dragondance #ghidra #reverse #dukeBarman

RISC-V from scratch 1: Introduction, toolchain setup, and hello world! https://twilco.github.io/riscv-from-scratch/2019/03/10/riscv-from-scratch-1.html

RISC-V from scratch 2: Hardware layouts, linker scripts, and C runtimes https://twilco.github.io/riscv-from-scratch/2019/04/27/riscv-from-scratch-2.html

#hardware #risc-v #dukeBarman

Cutter v1.8.2 has just been released! https://github.com/radareorg/cutter/releases/tag/v1.8.2 #radare2 #reverse #dukeBarman

Principal Reverse Engineer (Remote Full Time Job)

https://forum.reverse4you.org/t/principal-reverse-engineer-remote-full-time-job/10561

#вакансия #vacancy

Ghidra Processor Documentation Downloader https://gist.github.com/richinseattle/a80ebb7e2e4d4c8a815bc052b6c12210 #ghidra #dukeBarman

LaunchWinAFL Usage:

1) Install dynamorio and winafl
2) add https://gist.github.com/richinseattle/613105953003ec5e1f24ca17b2d8541f to ghidra scripts, set some one-time config at top; install paths, etc
3) load target exe & coverage dlls into ghidra
4) go to target function in disasm
5) run script to start fuzzing!

#ghidra #fuzzing #dukeBarman

In this episode, Mark Downie shows "Time Travel Debugging" https://channel9.msdn.com/Shows/Visual-Studio-Toolbox/Time-Travel-Debugging #debugger #dukeBarman

Ret-sync now supports Ghidra (syncing with popular debuggers) https://github.com/bootleg/ret-sync #ghidra #reverse #debugger #dukeBarman

MrsPicky - An IDAPython decompiler script that helps auditing calls to the memcpy(dst, src, n) and memmove(dst, c, n) functions. https://github.com/patois/mrspicky #ida #dukeBarman

Razzer: Finding kernel race bugs through fuzzing https://github.com/compsec-snu/razzer #fuzzing #linux #dukeBarman