OWASP Firmware Security Testing Methodology https://scriptingxss.gitbook.io/firmware-security-testing-methodology/ #reverse #hardware #dukeBarman
scriptingxss.gitbook.io
OWASP Firmware Security Testing Methodology | Firmware Security Testing Methodology
FSTM is composed of nine stages tailored to enable security researchers, software developers, hobbyists, and Information Security professionals with conducting firmware security assessments.
Famous security conference #Ekoparty will start a Streaming Marathon for the Red Cross 24 hours of workshops, interviews, talks and more to help the healthcare system during the covid-19 outbreak https://ekoparty.org/en_US/blog/our-blog-1/post/ekoparty-streaming-marathon-for-the-red-cross-14. #conference #reverse #exploitation #ekomaraton # #dukeBarman
Tale of two hypervisor bugs - Escaping from FreeBSD bhyve http://phrack.org/papers/escaping_from_freebsd_bhyve.html #exploitation #ezine #dukeBarman
phrack.org
.:: Phrack Magazine ::.
Phrack staff website.
Abstract library to generate angr states from a debugger state https://github.com/andreafioraldi/angrdbg #reverse #angr #dukeBarman
GitHub
GitHub - andreafioraldi/angrdbg: Abstract library to generate angr states from a debugger state
Abstract library to generate angr states from a debugger state - andreafioraldi/angrdbg
Nostarch anounced "The Ghidra Book" by Chris Eagle (author The IDA Pro Book) and Kara Nance https://nostarch.com/GhidraBook #reverse #ghidra #dukeBarman
Nostarch
The Ghidra Book
The Ghidra Book is a practical introduction to Ghidra, a comprehensive, open-source tool suite for reverse engineers.
r2con 2020 has moved to online format! CFP will be closed at 2020-08-17. Details: https://rada.re/con/2020/ #reverse #conference #dukeBarman
Introduction and Notes on Design Considerations of UEFI-based Hypervisors https://standa-note.blogspot.com/2020/03/introduction-and-design-considerations.html #uefi #hardware #dukeBarman
Blogspot
Introduction and Notes on Design Considerations of UEFI-based Hypervisors
In this post, I am going to write up some of the lessons learned and the challenges I had to go through to write a UEFI-based hypervisor tha...
r2con2019 - A journey through ESIL https://www.youtube.com/watch?v=MaFafykTASw #videos #r2con #reverse #radare2 #dukeBarman
YouTube
r2con2019 - A journey through ESIL
"A journey through ESIL: understanding code emulation within radare2"
slides: https://github.com/radareorg/r2con2019/tree/master/talks/journey-through-esil
speaker: Arnau Gàmez i Montolio
This talk will serve as an introduction to ESIL in order to understand…
slides: https://github.com/radareorg/r2con2019/tree/master/talks/journey-through-esil
speaker: Arnau Gàmez i Montolio
This talk will serve as an introduction to ESIL in order to understand…
IDA plugins and scripts for analyzing register usage frame https://github.com/shemesh999/oregami #reverse #ida #dukeBarman
GitHub
GitHub - shemesh999/oregami: IDA plugins and scripts for analyzing register usage frame
IDA plugins and scripts for analyzing register usage frame - shemesh999/oregami
Memory layout of QString and QList<T> with inlined functions by rh0main:
Full PNG:
- QString: https://romainthomas.fr/qt/qstring.png
- QList: https://romainthomas.fr/qt/qlist.png
#reverse #dukeBarman
Full PNG:
- QString: https://romainthomas.fr/qt/qstring.png
- QList: https://romainthomas.fr/qt/qlist.png
#reverse #dukeBarman
Reverse Engineering Resources About All Platforms (Windows/Linux/macOS/Android/iOS/IoT) https://github.com/alphaSeclab/awesome-reverse-engineering #reverse #dukeBarman
GitHub
GitHub - alphaSeclab/awesome-reverse-engineering: Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT)…
Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos) - alphaSeclab/awesome-rever...
radare2-4.4 is out! (Codename: pangolin) https://github.com/radareorg/radare2/releases/tag/4.4.0 #reverse #radare2 #dukeBarman
GitHub
Release 4.4.0 Codename: pangolin · radareorg/radare2
Release Notes
Version: 4.4.0
Previous: 4.3.1
Commits: 328
Contributors: 41
Highlights
Replace shellscript, nodejs and V testsuites with r2r.c which is shipped by default
Added initial analysis plu...
Version: 4.4.0
Previous: 4.3.1
Commits: 328
Contributors: 41
Highlights
Replace shellscript, nodejs and V testsuites with r2r.c which is shipped by default
Added initial analysis plu...
Materials from security track of FOSDEM 2020 were published (video, slides) https://fosdem.org/2020/schedule/track/security/ #linux #conference #fosdem #dukeBarman
archive.fosdem.org
FOSDEM 2020 - Security devroom
Multiple Kernel Vulnerabilities Affecting All Qualcomm Devices https://blog.zimperium.com/multiple-kernel-vulnerabilities-affecting-all-qualcomm-devices/ #exploitation #mobile #dukeBarman
Zimperium
Multiple Kernel Vulnerabilities Affecting All Qualcomm Devices - Zimperium
Eight months ago, the Zimperium research team (zLabs) disclosed to Qualcomm two kernel vulnerabilities affecting all Android devices with Qualcomm
Developers of radare2 framework have started the asm/anal unification library, which is already ready to review in a PR, but there are several questions to discuss about the design, requirements. Fill the form to help if you have some time https://forms.gle/eDAWAHhVsHnjvpg28 #reverse #radare2 #dukeBarman
Google Docs
RArch Questions
https://github.com/radareorg/radare2/pull/16608
Android Kernel Exploitation workshop materials by HackSysTeam https://cloudfuzz.github.io/android-kernel-exploitation/ #exploitation #android #dukeBarman
cloudfuzz.github.io
Introduction · Android Kernel Exploitation