Security, reversing, mathematics. Writing emulators and hypervisors in 🇦🇩.
Les Escaldes, Andorra
Joined December 2009
- Tweets695
- Following510
- Followers4.9K
- Likes8.1K
Alexandro Sanchez retweeted
My emulator now has a name: Sogen.
It now manages to analyze BO6's protection right in your browser :D
Alexandro Sanchez retweeted
We're revealing details of an obscure debugging feature in the Apple A12-A16 SoC’s that bypasses all of the hard-to-hack hardware-based memory protections on new iPhones. Its not used by the firmware and we don't know how the attackers found out about it. securelist.com/operation-tri…
Alexandro Sanchez retweeted
The boom, the bust and the adjust
The offensive cybersecurity industry — trends and updates
I'm super excited to publish this article which embeds my experience in the offensive cybersecurity industry over the years.
I hope you will enjoy it.
medium.com/@maor_s/the-boom-…
Alexandro Sanchez retweeted
Icicle is a multi architecture emulation framework designed for firmware fuzzing.
Nice research work
Paper: arxiv.org/pdf/2301.13346.pdf
github repo (pre-release): github.com/icicle-emu/icicle
#fuzzing #firmware #infosec #cybersecurity
Alexandro Sanchez retweeted
Put out a blog post on some reversing I've been doing on the side of the AMD Platform Security Processor / PSP. Part 1 is an overview of the design and memory-mapped I/O (MMIO), part 2 will be on the Crypto Co-Processor MMIO.
dayzerosec.com/blog/2023/04/…
Alexandro Sanchez retweeted
As a young man, I was convinced advances in theory drive advances in practice. The reality is that it is almost always the other direction.
Alexandro Sanchez retweeted
Found a method to see inside some chips, without having to unmount or destroy the chips.
Best part - the method only relies on lightly modded off-the-shelf cameras and lenses.
Read more at bunniestudios.com/blog/?p=67…
Alexandro Sanchez retweeted
My dream has finally come true. I've been working on a 160kb virtual machine named Blink. It's now capable of emulating programs as complex as GCC and Qemu. We can now vendor Linux toolchain binaries in our build configs and have them run across platforms. github.com/jart/blink
Alexandro Sanchez retweeted
Major step towards fast audio emulation! 👀
Profiling emulated DSP code per function, with callstacks and all. Just like a native program 🤯
I can't begin to explain what miracles were needed to even *think* about doing this. Super excited this worked out!
ALT Profiler diagram showing measured runtime of various functions of an emulated DSP.
Alexandro Sanchez retweeted
bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io
hackerone.com/reports/137997…
Alexandro Sanchez retweeted
FirmWire - a full-system baseband firmware analysis platform that supports Samsung and MediaTek github.com/FirmWire/FirmWire #CanSecWest
Alexandro Sanchez retweeted
Just learned mathematician and architect Christopher Alexander passed away last night. His theory and built work will remain an inspiration.
Alexandro Sanchez retweeted
The structure of the tree looks fine even as it rots from the inside. Sometimes a small limb falls off unexpectedly, some leaves start dying out of season, the bark looks wrong… and you can tell, if you pay attention.
Alexandro Sanchez retweeted
Do not miss tomorrow's talk regarding PS3 emulation!
"PlayStation 3 Emulation: (Re)implementing the impossible"
Feb 6th at 12h CET (3h PT, 6h ET, 11h UTC, 20h JST)
The speaker is @AlexAltea, former RPCS3 lead developer and Orbital's lead developer
fosdem.org/2022/schedule/eve…
Alexandro Sanchez retweeted
so, PS4 Crypto Coprocessor (CCP) interface in secure kernel had a bug that allowed us to dump (or better saying, bruteforce) key slots from SAMU,
that's how AES/HMAC keys from PFS, portability keys, VTRM keys, etc could be retrieved on unpatched firmware:
gist.github.com/flatz/222153…
Alexandro Sanchez retweeted
It's finally here! The story of how @SciresM and myself broken the Nvidia's TSEC with the help of many friends along the way.
I hope you have as much fun reading our work as we did writting about it! Enjoy!
Je Ne Sais Quoi - Falcons over the Horizon
hexkyz.blogspot.com/2021/11/…
A blogpost/writeup on TSEC co-authored by @hexkyz and myself.
Enjoy!
Alexandro Sanchez retweeted
Translation: We got all (symmetric) ps5 root keys. They can all be obtained from software - including per-console root key, if you look hard enough!
Alexandro Sanchez retweeted
Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary, how hard could it be? Check out our latest blogpost to find out: blog.ret2.io/2021/06/16/intr…
Alexandro Sanchez retweeted
It's been a while since I wrote anything so I wrote an article on how to discover the entire x86-64 instruction set in seconds including any hidden instructions and learn their basic properties while on it. There were some pretty interesting results!
blog.can.ac/2021/03/22/specu…
