mlaerten retweeted
I’m going to randomly pick 3 people who retweet this to receive a copy of the book. I’ll tweet out the winners tomorrow. I’ll also be giving away two more copies later this week complements of @RayRedacted! …and maybe a couple more next week just for university students
mlaerten retweeted
Just a daily reminder, that the C / C++ compiler is happy to remove any code it thinks doesn't make sense according to the standard.

ALT C/C++ function: int add(int a, int b) { if (a > 0 && b > 0) { // If both numbers are positive... if (a + b < 0) { // And the result is negative... puts("OH NO! An Integer Overflow!"); return 0; } } return a + b; } Was converted during compilation to (result of gcc -fdump-tree-all -O3): Removing basic block 3 Merging blocks 2 and 4 add (int a, int b) { int _12; <bb 2> : _12 = a_7(D) + b_8(D); return _12; }
mlaerten retweeted
Every. Single. Piece. Of. Hardware. In. Congress. NEEDS. to. be. replaced.
Nothing can be trusted.
mlaerten retweeted
Videos for Module 4 of pwn.college, Reverse Engineering, are UP! Check them out at pwn.college/modules/reversin…, or join us Wednesday at 2:30pm AZ time for a prerecorded stream on twitch.tv/pwncollege. The extended Q&A and collaboration is right after, at 4:30pm!
mlaerten retweeted
We've added info about the starting times for each talk in the description box for each of the 4 videos #r2con2020 🎥 Day 1 youtu.be/sgNDYgLyAP4 🎥 Day 2 youtu.be/gUeL2JcCChM 🎥 Day 3 youtu.be/A9wodVpSFds 🎥 Day 4 youtu.be/6VYYf5ut638
mlaerten retweeted
Friday, 19:00 GMT+2 at #r2con2020:
In a live coding, I will use @r2gui and @MiasmRe to automatically identify and remove opaque predicates in an APT malware sample.
Check it out: rada.re/con/2020/youtube
mlaerten retweeted
VMWare WS & ESXi has recently patched a new VM escape bug in the vmxnet3 virtual network adapter (VMSA-2020-0015, July 2020). I leave it as an exercise for my training attendees to reverse engineer the new one ;)
mlaerten retweeted
Today @_Staubfinger presented his bachelor thesis on coverage-guided fuzzing of Siemens S7-1200 PLCs. The PLC firmware got instrumented and was sending coverage info back to the AFL fuzzer. This is probably the first public code-coverage guided fuzzers for S7 PLCs. @ProductCERT
mlaerten retweeted
We are happy to announce the #r2con2020 conference schedule 💥💥💥and updated website right after closing the CFP! 🎉🎉🎉radare.org/con/2020/assets/r… <<< 📄 [PDF]
mlaerten retweeted
Privilege Escalation in AWS
github.com/RhinoSecurityLabs…
mlaerten retweeted
I created Hacker Container with 50+ common security tools to help you in Containerised & Kubernetes Cluster Security Assessments. Would love to hear feedback/suggestions 🙂
Read more about it blog.madhuakula.com/hacker-c…
#PenTesting #Docker #Kubernetes #Security #InfoSec #DevSecOps
mlaerten retweeted
I'm happy to announce the first public release of IDACode! Execute and debug all your IDA scripts from VS Code :)
You can find the extension on the VS Code marketplace and the IDA plugin in the repository along with some information:
github.com/ioncodes/idacode

































