Security Researcher / Pentester / Malware hunter
Poland
Joined August 2013
- Tweets190
- Following1.1K
- Followers1.8K
- Likes4.9K
Marcin Noga retweeted
Please re-post so it reaches as many students as possible - thanks! ❤️ Per popular demand we've added for my upcoming Python Cyber Summer Camp an option to:
[For students] Apply for fully sponsored workshop tickets → hackarcana.com/py-summer#spo…
[For sponsors] Sponsor tickets for students (we match these!) → hackarcana.com/py-summer-spo…
Thank you to everyone who was asking about this option and pushed us to implement it :)
Marcin Noga retweeted
Exploiting Asus driver to escalate privileges.
With few clever tactics Marcin Noga managed to bypass several constraints implemented by the driver devs.
With hardlinks and ObfDereferenceObject() one can decrement PreviousMode of a process to enter god mode (this was patched in 24H2).
Nicely done, @_Icewall!
Post: blog.talosintelligence.com/d…
#redteam #maldev #malwredevelopment
Marcin Noga retweeted
The biggest takeaway from this talk is that macOS font renderer ALMOST never invokes the interpreter. If you were fuzzing TTF bytecode without paying attention, it was probably not hitting the interpreter at all.
I'll post slides shortly with other interesting details. #OBTS
📜 Starting Day 2 Talks of #OBTS with a dive into the unexpected: “Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990” by Aleksandar Nikolic (@FuzzyAleks).
Who knew a simple PDF and the Fonts could be transformed into a digital weapon? In this talk, Aleksandar unravels the mystery behind a hidden vulnerability in Apple’s font rendering code, originally linked to Operation Triangulation. Like navigating ancient paths of Kinihapai, we’ll explore some of the oldest code running on the latest macOS and iOS, uncovering insights that could reshape how we detect and defend against such exploits.
OBTS kicks off strong—ready to see how deep this rabbit hole goes? 🌊📄 #AppleSecurity #macOS #ReverseEngineering
Marcin Noga retweeted
Teammates have published an overview of five years worth of router security research which has resulted in hundreds of vulnerabilities discovered in routers from more than a dozen different companies.
Since the #VPNFilter malware several years ago, our vulnerability research team has looked into several popular wireless routers used in homes and small businesses. Now, we have a rundown of all the vulnerabilities we discovered as part of this research cs.co/6018PwImO
Marcin Noga retweeted
On Friday I'll be doing my "PCI Express To Hell" talk:
youtube.com/watch?v=fE0fnGbI…
If you're building your own PCs you should check it out! Last year I reworked my whole computer setup and learned a lot about PCIE. Don't make the same mistakes I did ;)
Plz RT for range :)
Marcin Noga retweeted
Our vulnerability research team discovered 12 memory corruption vulnerabilities in MSRPC on #Apple macOS and #VMWare vCenter. We have a deep dive into how an attacker could exploit these vulnerabilities and what it says about the use of forked codebases cs.co/6012P3wLq
Marcin Noga retweeted
Ok, I am looking out for security researcher role. If you can help, please DM.
RT, like and recommendations are much appreciated. Here is My Linkedin profile, which will give you more details:
linkedin.com/in/hardik05/
Marcin Noga retweeted
Remember these? Original Lytro! Lightfield cameras of the future! I grabbed a few off eBay some time ago and took a peek at the firmware. Found secret unlock that enables full remote control of all camera features. Full writeup here: github.com/ea/lytro_unlock
Marcin Noga retweeted
During last weekend I've created a tool to bypass macbook firmware password and bypass fully enabled secure boot on my macbook air 2019. Kudos to @qwertyoruiopz and the @checkra1n team for porting checkra1n to T2. It is a solid base for mac research.
Marcin Noga retweeted
Check out this in-depth walkthrough of the development of a new tool we're releasing called Barbervisor, which makes fuzzing easier for researchers cs.co/6019G9mXL
Marcin Noga retweeted
Join our LIVE chat today using #CiscoChat and clicking the link here, as Nick Biasini from our Outreach team discusses the latest threats cs.co/6010GVQLp
Marcin Noga retweeted
Today I'm happy to release new research I've been working on for a while: 0-click RCE via MMS in all modern Samsung phones (released 2015+), due to numerous bugs in a little-known custom "Qmage" image codec supported by Skia on Samsung devices. Demo: youtube.com/watch?v=nke8Z3G4…
Marcin Noga retweeted
I wrote something, it is also first public mention that i have a company and im free to hire ;]
Our first public analysis, new campaing from #Aggah analyzed with a lot of #bashfu blog.malwarelab.pl/posts/bas…
Marcin Noga retweeted
A while back I did a quick fuzzing exercise on Google Chrome <portal> element blog.redteam.pl/2019/12/chro… @redteampl
Marcin Noga retweeted
We were busy with vulnerabilities this whole week. Make sure you're staying updated and patching your hardware and software.
Microsoft Excel: cs.co/6017139bb
Microsoft Media Foundation: cs.co/6018139bj
Intel graphics drivers: cs.co/6019139bd
Marcin Noga retweeted
Thanks again @HushCon its been real. Slide deck is available at github.com/blankwall/HushCon
Marcin Noga retweeted
Vulnerability Spotlight: TALOS-2018-0635/0636 – Sophos HitmanPro.Alert memory disclosure and code execution vulnerabilities blogs.cisco.com/security/tal…
Marcin Noga retweeted
Today, Cisco Talos disclosed a vulnerability in the WindowsCodecs.dll component of the Windows operating system. Read about our findings here, and find our coverage in Snort cs.co/6016DfVrM
Marcin Noga retweeted
Vulnerability Spotlight: Hyland Perceptive Document Filters Multiple Vulnerabilites dlvr.it/QQsvfF
Marcin Noga retweeted
Deep Dive in MarkLogic Exploitation Process via Argus PDF Converter dlvr.it/Pn2MvY
