If you need to DM please use something reliable like LinkedIn. Notifications here are unreliable and largely advertising
Danny Quist retweeted
Regarding CVE-2024-38063 IPV6 RCE in Windows...
After reading RFCs about optional headers in IPv6 packets, I managed to create POC to cause a crash. The bug check in this case isn't too detailed, but essentially the underflow creates a large value used in a loop which eventually write data out of bounds and causes a crash.
I imagine this can be weaponized using heap massaging techniques and corrupting adjacent objects in the heap.
As many have already stated before, this can easily be mitigated by applying the latest patches or disabling IPv6 (which is enabled by default).
Great engineering from Chester @raceface604 These met the asphalt at 60mph when my bike fell off the rack. Good work team, you saved my bike from a lot more damage
Danny Quist retweeted
Very excited to share that I will be giving a keynote speech at REcon, where I will be looking back on 30 years of decompilation from my own experience. Join me in celebrating 🎉 this milestone achievement! #REcon #decompilation #keynotespeaker
Marking the 30th anniversary of her PhD Thesis on “Reverse Compilation Techniques”, the Mother of Decompilation, Cristina Cifuentes @criscifuentes, will be the keynote speaker of the Recon 2024 conference. Come celebrate with us at Recon Montreal in June! recon.cx
Feedback is key, don't miss this opportunity
Do you work on cool attack or other offensive research (Black Hat/DEF CON type of work)? 🥷 Consider submitting your research to the WOOT practitioner track to get valuable feedback from an amazing PC 😍 and reach a wider audience 🎤!
usenix.org/conference/woot24…
Danny Quist retweeted
BianLian toolchain reverse engineering, analysis of the target and more. It was amazing to be part of the team writing this report redacted.link/7yl
Danny Quist retweeted
I'm confused by some of the mistakes the decompilation makes. I would have thought it would be easy to learn that it should copy the name of the function into the output, but it almost never does.
Danny Quist retweeted
Really, sincerely hoping that this means my students won't have to live under the threat of deportation for the next four years at least :)
Shout out to all the hard working people at the Palo Verde Nuclear Generator. Thanks for keeping the lights on! #PaloVerdeGen
Danny Quist retweeted
Ghidra's extensibility is jaw-dropping. Today I needed the pcode to model the x86 parity flag, which it doesn't do by default. 30 minutes and a 35-line patch to ia.sinc later, I can proceed. No other tool even comes close to how easy that was. (diff: github.com/RolfRolles/Ghidra… …)
Reverse engineering fell to the wayside with kids/job/management/moving/real life. Now there is Binary Ninja! Hot damn!
.@AskLyft staying at the Dulles Marriott, just had 2 drivers cancel. 1 even called and said he'd been waiting 30 min and my fare was too low
.@40MadBum is showing his pitches... 2 seam, off-speed, are clearly visible in his glove, and in the wind up