Anything can be learned :)
Joined August 2020
- Tweets201
- Following1.2K
- Followers11
- Likes1.7K
farinavito retweeted
This year @binarly_io has also expanded their sponsorship to the creation of a new Firmware Security Learning Path!
This captures current and future plans for classes involving security in the deep-dark of firmware! But Binarly is starting to give visibility into what's going on there with their binary analysis platform.
Link to full PDF below.
farinavito retweeted
If you find yourself wanting a pdf for a single instruction (Intel || AMD), and not dealing with the entire manual: revers.engineering/x86/<instruction>.pdf
You can see the index @ revers.engineering/x86/
Just as an alternative to FelixCloutier’s site, it will update every new edition.
farinavito retweeted
📣"Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" is now released!📣
ost2.fyi/BT2222
This class teaches you about the 30+ data types that the Blue2thprinting software can collect and surface for when you're trying to determine what a device is, and whether it has any known vulnerabilities. New in v2.0+ is the BTIDALPOOL crowdsourcing server for researchers to push & pull data about devices they've discovered.
farinavito retweeted
"Show your papers" is not a healthy default for a free society.
But that's exactly what we've accepted online.
farinavito retweeted
You can watch the recording of today's @offby1security stream with @albinowax here:
youtube.com/live/B7p8dIB7bFg
farinavito retweeted
Finalizing a series of lectures updating my Hypervisor Vulnerability Research course on the period 2021-2025
MASSIVE new developments across virtualization hardware technology, hypervisor fuzzing, emergent attacks, and exploit competitions 🔥 @zerodaytraining
farinavito retweeted
So far, I have already written 15 articles (1045 pages), which have been published on my blog:
blog: exploitreversing.com
ERS: Exploiting Reversing Series (currently at 439 pages, with continued progress underway):
[+] ERS 05: exploitreversing.com/2025/03…
[+] ERS 04: exploitreversing.com/2025/02…
[+] ERS 03: exploitreversing.com/2025/01…
[+] ERS 02: exploitreversing.com/2024/01…
[+] ERS 01: exploitreversing.com/2023/04…
MAS: Malware Analysis Series (606 pages -- finished):
[+] MAS 10: exploitreversing.com/2025/01…
[+] MAS 09: exploitreversing.com/2025/01…
[+] MAS 08: exploitreversing.com/2024/08…
[+] MAS 07: exploitreversing.com/2023/01…
[+] MAS 06: exploitreversing.com/2022/11…
[+] MAS 05: exploitreversing.com/2022/09…
[+] MAS 04: exploitreversing.com/2022/05…
[+] MAS 03: exploitreversing.com/2022/05…
[+] MAS 02: exploitreversing.com/2022/02…
[+] MAS 01: exploitreversing.com/2021/12…
I'll soon begin writing the next articles in the Exploiting Reversing series, which will focus on vulnerability and exploitation, once I've laid all the necessary groundwork.
Enjoy reading and have a great day.
#windows #iOS #macOS #cybersecurity #infosec #chrome #kernel #malware #reverseengineering #vulnerability #research #hypervisor
farinavito retweeted
🚨 Vuln Research in Video Games
☑️ CVE Analysis, Patch Analysis & Code Review
✅ CVE-2020-14938 = Heap-based Buffer Overflow
☑️ CVE-2020-14939 = Arbitrary Code Execution
⭐️ Can We Bypass Their Patch? Yes we can!
🔗youtu.be/vHocemqpOuo
farinavito retweeted
Here's your chance to learn Windows kernel exploitation from #OST2 instructor @saidelike in-person this November in Korea!
This quoted post is unavailable.
farinavito retweeted
Join me this Friday at 11AM PT on the @offby1security stream with the good folks from @dreadnode for a session on offensive/adversarial AI. Details coming soon!
farinavito retweeted
I will be streaming a portion of the SANS SEC660 course I'm teaching today in DC on Introduction to Windows Exploit Development. We will use ROP to get around DEP on Windows 11.
1PM PT
youtube.com/watch?v=cbIEwz1P…
farinavito retweeted
If there's interest I was thinking about doing a stream for an hour this Friday while I'm teaching a class on introductory Windows exploit development. Next Friday I'm hoping to continue turning the recent patch diff we did on ole32.dll into a crash condition PoC.
farinavito retweeted
🥳We're happy to say that we've passed 29k registered OST2 students! Keep letting people know about our classes via your RTs and word of mouth, and we'll keep finding new future instructors!🎊
farinavito retweeted
This class dovetails nicely with the "Secure Development / Vulnerabilities 1001: C-Family Software Implementation Vulnerabilities" class (ost2.fyi/Vulns1001), which introduces fuzzing as a necessary tool in both the developer and vuln hunter's toolbox, but which left more detailed examination for future classes like this.
📣"Fuzzing 1001: Introductory white-box fuzzing with AFL++" by Francesco Pollicino is now released!📣
ost2.fyi/Fuzz1001
This class covers progressively more features and functionality of AFL++ to teach students how to find real past vulnerabilities.
farinavito retweeted
The "Fuzzing 1001: Introductory white-box fuzzing with AFL++" class by Francesco Pollicino has been finalized, and will be publicly released in 2 weeks (June 30th).
Are you also noticing @telegram takeovers and account creations without the knowledge of the owner of the account or telephone number?
farinavito retweeted
A great day for a VR and RE newsletter 🗞️
New remote Android attack surfaces from @natashenka
Results of the RP2350 challenge
WebKit RCE from @qriousec
Some linux bugs
+ Jobs and MORE 👇
blog.exploits.club/exploits-…
farinavito retweeted
Time For Another Weekly VR/RE Round Up 📰 EC #54
@Doyensec fuzzes ksmbd
AMFI RE and a TCC Bypass From @patch1t
Windows Exploit Dev Resource Round-Up @7etsuo
Stream Deck RE
+ Jobs and MORE 👇
blog.exploits.club/exploits-…
farinavito retweeted
ITS EXPLOITS CLUB DAY 🗞️
@_0xTen with Linux 1-day carnage
Lots of Windows internals (cc: @PetrBenes, @ExodusIntel, @wetw0rk_bot)
Lessons in Android Bulletins from @vr_progress
Indoor camera 5 bug chain
+ Jobs and MORE 👇
blog.exploits.club/exploits-…
