LaunchWinAFL Usage:

1) Install dynamorio and winafl
2) add https://gist.github.com/richinseattle/613105953003ec5e1f24ca17b2d8541f to ghidra scripts, set some one-time config at top; install paths, etc
3) load target exe & coverage dlls into ghidra
4) go to target function in disasm
5) run script to start fuzzing!

#ghidra #fuzzing #dukeBarman

In this episode, Mark Downie shows "Time Travel Debugging" https://channel9.msdn.com/Shows/Visual-Studio-Toolbox/Time-Travel-Debugging #debugger #dukeBarman

Ret-sync now supports Ghidra (syncing with popular debuggers) https://github.com/bootleg/ret-sync #ghidra #reverse #debugger #dukeBarman

MrsPicky - An IDAPython decompiler script that helps auditing calls to the memcpy(dst, src, n) and memmove(dst, c, n) functions. https://github.com/patois/mrspicky #ida #dukeBarman

Razzer: Finding kernel race bugs through fuzzing https://github.com/compsec-snu/razzer #fuzzing #linux #dukeBarman

Unpacking ASIC firmware: AntMiner Exploited https://serhack.me/articles/unpacking-asic-firmware-antminer-exploited #hardware #reverse #dukeBarman

Pandemic binary program analysis framework in OCaml https://github.com/RolfRolles/PandemicML #reverse #ocaml #dukeBarman

Program of OFFZONE 2019 was announced https://offzone.moscow/program/ #conference #offzone #dukeBarman

"Building universal Android rooting with a type confusion vulnerability" (Zerocon 2019) Slides: https://github.com/ThomasKing2014/slides/blob/master/Building%20universal%20Android%20rooting%20with%20a%20type%20confusion%20vulnerability.pdf Demo: https://www.youtube.com/watch?v=zHEQ8fOLSrM&feature=youtu.be #android #exploitation #dukeBarman

Implementing a New CPU Architecture for Ghidra https://docs.google.com/presentation/d/1b955DV2ii-Dgv6YR4kUrJtjGugEqXD3FffTHRfvVSYo/ #ghidra #reverse #dukeBarman

s2e was updated! Added support for FP/MMX/SSE registers, improve performance. http://s2e.systems/releases/ #reverse #dukeBarman

Специально для проекта NoiSeBit мы разыгрываем 3 инвайта на конференцию OFFZONE (offzone.moscow)!! 👻 Для участия нужно ответить правильно на вопрос:

- Что общего у названия OFFZONE c Offensive Research? (правильный ответ прозвучал в нашем последнем выпуске)

Для участия в розыгрыше нужно быть нашим подписчиком и написать ответ в нашем твиттере в комментарии к https://twitter.com/N0iSeBit/status/1134368038898155521 В субботу в 23:00 мы объявим 3 победителей. Удачи! 🤪

Analysis of a 1day (CVE-2019-0547) and discovery of a forgotten condition in the patch (CVE-2019-0726) – Part 1 of 2 https://sensepost.com/blog/2019/analysis-of-a-1day-cve-2019-0547-and-discovery-of-a-forgotten-condition-in-the-patch-cve-2019-0726-part-1-of-2/ #exploitation #reverse #dukeBarman

Reverse-engineering Samsung S10 TEEGRIS TrustZone OS http://allsoftwaresucks.blogspot.com/2019/05/reverse-engineering-samsung-exynos-9820.html #reverse #ghidra #mobile #dukeBarman

Package manager for IDA Pro https://github.com/Jinmo/idapkg #ida #reverse #dukeBarman

Overcoming Fear: Reversing With Radare2 - Arnau Gamez Montolio https://www.youtube.com/watch?v=317dNavABKo #radare2 #conference #reverse #dukeBarman

Time travel debugging: It’s a blast! (from the past) https://blogs.technet.microsoft.com/srd/2019/05/29/time-travel-debugging-its-a-blast-from-the-past/ #debugger #dukeBarman

Videos from HITBSecConf2019 – Amsterdam. Enjoy! https://www.youtube.com/watch?v=L9NhN9DMZno&list=PLmv8T5-GONwSuU8vMeZ6ECvr4NqJJxm34 #video #conference #dukeBarman

Выходим на финишную прямую! 💫
Сегодня последний день скидки Early Birds на билеты OFFZONE 2019 🔥
Покупаем здесь: https://goo.gl/TyC2sW

Ghidra utilities for analyzing firmware https://github.com/al3xtjames/ghidra-firmware-utils #hardware #reverse #ghidra #dukeBarman