malware&reversing
Francia
Joined June 2009
- Tweets1.6K
- Following686
- Followers733
- Likes1.2K
Emanuele Cozzi retweeted
Many things happened since US OFAC designated as global terrorists. Here comes a dedicated space to find out what has been unfolding since Aug 26, to empower our unpredictable, chaotic and amazing solidarity network. keepitfree.ai/announcements/… #KeepItFree #AIvsUS #AutisticiInventati
Emanuele Cozzi retweeted
🚨 New research from EURECOM & Univ. of Milan!
[1/3] “Unveiling BYOVD Threats: Malware’s Use and Abuse of Kernel Drivers” (to appear at NDSS’26) reveals how malware exploits signed drivers to gain kernel privileges. This work led to the discovery of 7 unknown weaponized drivers💣
Emanuele Cozzi retweeted
Heya! Our new research on client-side game cheating & anti-cheat systems is out: birmingham.ac.uk/news/2024/w…
Joint work with Sam Collins, Alex Poulopoulos, and @TomChothia.
Full paper: cs.bham.ac.uk/~tpc/Papers/An…
Emanuele Cozzi retweeted
We are very excited to share our last research work: 𝐄𝐔𝐂𝐋𝐄𝐀𝐊, authored by Thomas Roche.
An electromagnetic Side-Channel Vulnerability in the ECDSA implementation of all Infineon security microcontrollers, notably impacting all YubiKey 5 Series.
ninjalab.io/eucleak/
Emanuele Cozzi retweeted
In a few minutes I will present our work on Android evasive malware to @ASIACCS2024 [1].
What better occasion to reveal that DroidDungeon, the sandbox developed for this work, has evolved into a commercial product?
Join the beta -> tnemesis.com/
Emanuele Cozzi retweeted
Excited to share (albeit with a little delay) that our @binarly_io talk about #LogoFAIL at BlackHat EU is available! Check it out to see the vulnerabilities we found in UEFI image parsing and their security implications:
youtube.com/watch?v=ch0t2_yj…
Emanuele Cozzi retweeted
We are setting up a user study to measure the impact of LLMs during the Reverse Engineering process.
If you have ever used LLMs for reversing, click here to start the survey (5 mins) 👉 forms.gle/tKBdNjAKE5oyPqet7
You can leave your email address for the second phase-with prizes💰
Emanuele Cozzi retweeted
The xz situation is absolutely insane and almost certainly state sponsored.
This is an excellent example of a widely used software being maintained by basically one person.
Read this web article and then frown and become sad.
boehs.org/node/everything-i-…
Emanuele Cozzi retweeted
🚀 BIG ANNOUNCEMENT! 🚀
The full rev.ng decompiler pipeline is now fully open source!
Also, we'll soon start to invite people to participate in the UI closed beta.
Check out our latest blog post: rev.ng/blog/open-sourcing-re…
Emanuele Cozzi retweeted
Fuzzing is hard, evaluating fuzzing is harder 🔥
For our new @IEEESSP paper, we studied 150 fuzzing evals and found issues such as lackluster documentation, bad experiment setups, or questionable CVEs
📄 Paper mschloegel.me/paper/schloege…
🔧 Help us fix this github.com/fuzz-evaluator/gu…
Emanuele Cozzi retweeted
I'm about 50% done integrating SAILR into angr master: github.com/angr/angr/issues/… 🎉
P.S.: You can also use angr's decompiler more easily now. Try this out:
```
pip3 install angr && \
angr decompile /bin/true --functions main
```
Emanuele Cozzi retweeted
elfconv: AOT compiler for translating Linux/aarch64 ELF → LLVM bitcode → WASM
By my colleague @ming_rrr
medium.com/nttlabs/elfconv-a…
Emanuele Cozzi retweeted
Sono lieto di annunciare la disponibilità del primo corso di malware analysis in italiano: "Introduzione alla malware analysis: Un approccio pratico"
Oltre 9 ore di corso: t.ly/WPhap (utilizzate questo link, non cercate il corso su udemy ^^)
condivisione gradita :)
Emanuele Cozzi retweeted
2024 is the year of the decompiler! Start your year off right by reading a post on the last 30 years of decompilation and one of its hardest problems: structuring! mahaloz.re/dec-history-pt1
Part 2 to be released next week.
Emanuele Cozzi retweeted
I just published the code and hardware for Tamarin-C, the iPhone 15 USB-C exploration tool I presented at #37c3.
github.com/stacksmashing/tam…
Emanuele Cozzi retweeted
As WOOT becomes a more formal Conference, we want to keep receiving industry submissions! WOOT experiments a new model: in addition to the academic submissions, there is a practitioner's track. Submit a draft early, inerract with reviewers to get this written as a paper.
The USENIX WOOT '24 conference(!) draft CfP is out: usenix.org/conference/woot24…. March 12 is the ⏰ for your offensive security papers! Or think academics should know about your work, but no experience writing formal papers? Submit a draft to the new practitioner track by Feb 20!
Emanuele Cozzi retweeted
They HACKED A TRAIN. For real. Train operators asked for this to see why their trains didn't run after servicing. Turns out that vendor/producer implemented a geofence lock for trains serviced somewhere else. Amazing story, one of the best hacks in 2023. social.hackerspace.pl/@q3k/1…
Emanuele Cozzi retweeted
Check it out, it's tmp.0ut Volume 3!
tmpout.sh/3/
ALT screenshot of the tmp.0ut Vol 3 table of contents
Emanuele Cozzi retweeted
New write-up on an Intel Ice Lake CPU vulnerability, we can effectively corrupt the RoB with redundant prefixes! 🔥 An updated microcode is available today for all affected products, cloud providers should patch ASAP.
lock.cmpxchg8b.com/reptar.ht…
Emanuele Cozzi retweeted
I'm excited to announce a new decompilation control flow structuring algorithm, SAILR, which is the first to precisely revert compiler optimizations in decompilation. Find out how in our USENIX 2024 paper: zionbasque.com/files/publica…. Code, info, and links in the 🧵
