dhulliger

Shoutout to Mole, our @binary.ninja plugin that made these findings possible. Mole finds interesting execution paths in binaries by performing backward slicing on variables in MLIL SSA form, enabling static taint analysis. Mole: github.com/cyber-defenc... Advisory: certvde.com/en/advisorie...

finally seen some real good use of ai www.youtube.com/watch?v=z3pV...

Life is actually pretty simple

Sad truth youtu.be/T4Upf_B9RLQ?...

Worth watching! youtu.be/3C1Gnxhfok0?...

Are you concerned about your privacy and the power abuse by American tech companies? This website helps you switch to European and open-source alternatives. switch-to.eu/en/

Nothing new, but the current political situation in the US just makes it way more of an issue!

In Minnesota wurden Aktivistinnen festgenommen, die Proteste gegen ICE organisiert haben sollen. Von einer hat das Weiße Haus ein Foto manipulieren lassen. #Bildbearbeitung

Wie jedes Jahr: Hoffen auf Weltverbesserung am @worldeconomicforum.bsky.social

🧵 Thread on beautiful data centers: MareNostrum 4 (Barcelona SCC): Often called "the most beautiful data center in the world," this facility is housed inside the Torre Girona Chapel, a deconsecrated 19th-century church. When fully installed, it will have a peak performance of 13.9 Petaflops.

First two unauthenticated RCE CVEs published - Discovered with the help of our #Binja plugin #Mole! 🔗 Advisory: certvde.com/en/advisorie... @ruheabteil.ch 🔗 Mole: github.com/cyber-defenc... More vulnerabilities have been reported - stay tuned for upcoming advisories.

🧯The security community is pushing back against new claims that 80% of #ransomware attacks are AI-driven, a figure from a recent MIT-linked report now drawing widespread criticism. → socket.dev/blog/securit...

Did a new one

Earlier that year @damianpfammatter.bsky.social and me had time to play with domotics equipment. Finally the patches and advisories were released: www.certvde.com/en/advisorie...

Thanks for the excellent writeup @intel471.bsky.social www.intel471.com/blog/the-phr...

My DEFCON talk "We are currently clean on OPSEC" now has over 30k views on YouTube, so now more people watched my talk than attended DEFCON itself. If you haven't seen it, please do! The Trump admin's incompetence is mindbogglingly BONKERS www.youtube.com/watch?v=KFYy...

Check out our latest blog post on modeling complex control flow with function-level basic block analysis in Binary Ninja 5.1. From DSPs to Brain***k, this update makes it easier to develop plugins for tricky architectures. binary.ninja/2025/08/12/f...

During my #BHUSA talk I've released many ETW research tools, of which the most notable is BamboozlEDR. This tool allows you to inject events into ETW, allowing you to generate fake alerts and blind EDRs. github.com/olafhartong/... Slides available here: github.com/olafhartong/...

cut my heap into pieces, this is my crash report: allocation, no alignment don't give a fuck if it faults on assignment this is fatal abort()

Linda McMahon, Secretary of Education, sent Harvard a letter. They graded it. Bwahahaha.

Heard of #ContextJail? It's a nasty new technique: puts target thread into ⓪ deadloop, for as long as you can afford. Requires THREAD_GET_CONTEXT right. The gist? Just spam NtGetContextThread(tgt).😸 Target will be jailed, running nt!PspGetSetContextSpecialApc 🔁. Src & binary in [ALT]. Usecases: ⤵️

Someone please show to the orange man.. xkcd.com/3073

The craziest file I made & visualized recently was combining the Doom PDF with a DOS & Windows (EXE & PE) polyglot. It runs Doom on OS from 1993 until today, and Chrome-based PDF viewers! You can make it an HTML/JS polyglot too to run on most browsers! (3/3)

Frühling ☀️🎉

quick guide to Signal's disappearing messages settings

10 years ago🫣 Still one of my favorite places

By making minor changes to command-line arguments, it is possible to bypass EDR/AV detections. My research, comprising ~70 Windows executables, found that all of them were vulnerable to this, to varying degrees. Here’s what I found and why it matters 👉 wietze.github.io/blog/bypassi...

the most important aspect of kernel development is to make sure your driver freaks the fuck out whenever the system resumes from sleep

I gave a day 1 closing keynote at DistrictCon yesterday. Surprisingly, it was a security talk about memory safety. Slides are here: docs.google.com/presentation...

Why making responsible disclosure as cumbersome as possible? Did I miss a hidden agenda to go back to full disclosure vulns in random mailing lists?

Literally todays struggle

youtu.be/6ad4MH7fMLs?...

Say goodnight to the bad GUIDs ! badguids.github.io

New blog post on the abuse of the IDispatch COM interface to get unexpected objects loaded into a process. Demoed by using this to get arbitrary code execution in a PPL process. googleprojectzero.blogspot.com/2025/01/wind...

Paper is here: www.usenix.org/conference/u... Code at github.com/pr0me/SAFIRE...

In case if you wonder what broke #ProcessHollowing on Windows 11 24H2, I have something for you: hshrzd.wordpress.com/2025/01/27/p...

A vulnerability reported in September 2022 to Poly apparently got a CVE in 2024 (CVE-2024-27460). Never was informed. After reporting I did countless requests for updates and as the company being bought by HP i lost hope they would publish anything. support.hp.com/us-en/docume...

State of world politics in one picture 😂

Beautiful landscapes, terrible politics 🤮

Monday tunes youtu.be/vBrazzkIeLA?...

Python tool that converts Microsoft Defender Antivirus Signatures (VDM) into YARA rules. https://github.com/t-tani/defender2yara