Independent information security researcher • Lead application security researcher at AppSec @Kaspersky • OSCP OSWE
Joined August 2020
- Tweets92
- Following106
- Followers637
- Likes178
Pinned Tweet
I’ve written my first blog post - write-up for CVE-2021-23874! How to enumerate COM-objects attack surface, explore implemented functionality and exploit it the-deniss.github.io/posts/2…
Denis Skvortcov retweeted
CimFS: Crashing in memory, Finding SYSTEM! @cplearns2h4ck dug into Microsoft CimFS, found a sneaky 0-day, and guess what? The fix by Microsoft was just locking the door 🔐on unprivileged users. 😂
Dive into the adventure with us: starlabs.sg/blog/2025/03-cim…
Denis Skvortcov retweeted
🔥 Last barrier destroyed: The compromise of Fuse Encryption Key in Intel CPUs!
Full story by our researcher @_markel___
swarm.ptsecurity.com/last-ba…
Denis Skvortcov retweeted
Excellent write-up on CVE-2024-38063 by Marcus Hutchins.
malwaretech.com/2024/08/expl…
This was my first time ever reversing tcpip.sys and despite making many mistakes along the way I have learned a ton.
Denis Skvortcov retweeted
Today, Angelboy (@scwuaptx) revealed his Kernel Streaming research! 🚀 Check out how he uncovered this overlooked attack surface, leading to pwning Windows 11 at #Pwn2Own Vancouver 2024:
devco.re/blog/2024/08/23/str…
#WindowsKernel #MSRC
Our team has uncovered multiple memory corruption vulnerabilities in FreeRDP and Suricata. These flaws could potentially expose users to significant security risks. Read the full report in blog post to understand the issues and how to protect your systems securelist.com/suricata-free…
Denis Skvortcov retweeted
The time has come, and with it your reading material for the week.
Phrack #71 is officially released ONLINE! Let us know what you think!
phrack.org/issues/71/1.html
ALT table for contents for Phrack 71
Denis Skvortcov retweeted
🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)!
I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis progresses! 🧐 #infosec #xz
Denis Skvortcov retweeted
In this post I'll use CVE-2023-6241, a vulnerability in the Arm Mali GPU that I reported last November to gain arbitrary kernel code execution from an untrusted app on a Pixel 8 with MTE enabled. github.blog/2024-03-18-gaini…
Denis Skvortcov retweeted
🔮NEW RCA!! A few hours after it was patched, TAG found an ITW exploit sample for CVE-2023-36802. @benoitsevens analyzed it in detail ✨
googleprojectzero.github.io/…
Denis Skvortcov retweeted
Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬
blog.google/threat-analysis-…
Denis Skvortcov retweeted
Excited to share my hardest research about UAC 🤯
"Bypassing UAC with SSPI Datagram Contexts" 🔥
Enjoy the read! 👇
splintercod3.blogspot.com/p/…
Denis Skvortcov retweeted
First big result from our new CPU research project, a use-after-free in AMD Zen2 processors! 🔥 AMD have just released updated microcode for affected systems, please update! lock.cmpxchg8b.com/zenbleed.…
I’ve found new vulnerability CVE-2023-1586 in Avast Anti-Virus restore malware functionality that could allow an attacker to gain SYSTEM privileges and execute arbitrary code! Details in my new short post the-deniss.github.io/posts/a…
Denis Skvortcov retweeted
Thanks to everyone who attended my Black Hat Asia talk! You can find the slides here: drive.google.com/file/d/1Pj7…
Did you know that just a few month ago, if Avast quarantined your malware, it wasn't a problem, it was the opportunity.. to gain SYSTEM privileges and execute arbitrary code! Details of exploit chain CVE-2023-1585 and CVE-2023-1587 in my new post the-deniss.github.io/posts/2…
Root cause and exploitation analysis of CVE-2022-45770 is now available in English and without a paywall - hackmag.com/security/aguard-…. Enjoy reading!
My former colleague just published walkthrough about @AdGuard kernel driver CVE-2022-45770 identification and exploitation. Fascinating reading and good introduction to windows kernel exploitation xakep.ru/2023/01/27/aguard-c…
Denis Skvortcov retweeted
Time for a new blogpost! Let's do a CHERIoT walkthrough - including a straightforward setup, understanding how we kill bug classes and mitigating attacks on our minimal TCB through practical examples, and more fun! msrc.microsoft.com/blog/2023…
(1/4) Just read the very useful article by @timmisiak
timdbg.com/posts/remote-debu…
This post is a really good cheatsheet on remote usermode debugging but I think there is missing super valuable (at least for vulnresearch) method of debugging system services
(3/4) On the host machine wait until the service will be started, then:
1. WinDbgX -premote tcp:port=1025,server=mytarget
2. Use the UI to attach to the process MyService.exe
3. Now enjoy debugging, e.g. stop service at the entry point: ~*m; bp $exentry; g
Cc @timmisiak
(4/4) In addition you can adjust service timeout:
learn.microsoft.com/en-us/wi…
