security researcher && low-level dev
Italy
Joined April 2017
- Tweets78
- Following771
- Followers109
- Likes689
mattless_ retweeted
Excellent writeup on Windows kernel vulnerable drivers and how to identify them
Takahiro Haruyama (@VMware)
blogs.vmware.com/security/20…
#cybersecurity #Windows
mattless_ retweeted
Just published our (8th) annual:
"The Mac Malware of <Year>" white paper: objective-see.org/blog/blog_…
It's a technical deep dive into every new macOS malware specimen of 2023, detailing:
💉 Infection
💾 Persistence
📡 Capabilities
...plus samples, detections, & more! 👾🍎💻
mattless_ retweeted
@lcavallaro & I are thrilled to announce “Benefits and Outlook of Program Analysis for Systems Security”.
This COSE special issue seeks technical & vision papers capitalizing on the rich cross-pollination ongoing among Computer Security, PL, and SE research.
RTs appreciated! ▶️🧵
Alternative way of letting #msdt execute stuff without the usual cmdline (@harr0ey)
gist.github.com/homjxi0e/3f3…
mattless_ retweeted
The rtf format of the “ms-msdt” 0day is using the URL Monkier to load and run the IE engine, which does remind me of my own presentation years ago. Same/similar bug, different paths.
sites.google.com/site/zeroda…
#youneverreallyknowCOM
I’d like to suggest to #Conti devs the existence of IWbemServices::ExecMethod without the need of #wmic
docs.microsoft.com/en-us/win…
#ContiLeaks
mattless_ retweeted
This blog post sums up my yearlong Windows Drivers research, detailing my own methodology for reverse engineering drivers, finding possible vulnerabilities, and understanding their exploitability: voidsec.com/windows-drivers-…
mattless_ retweeted
Some time ago, I wrote a proof-of-concept implant framework called Shlyuz that took some design cues from the CIA Assassin implant framework as described in #vault7.
I'm happy to finally be able to share it with the world; but first, some background:
und3rf10w.github.io/posts/20…
Such a marvelous conf. An icebreaker opportunity for me since it was my first time as a speaker. If you are curious go take a look at our talk. @dcdelia
⚠️Talks recordings available on our YT channel youtube.com/playlist?list=PL… Thanks again to all our speakers for making #nohat2021 such great event! @embyte @daviddiaul @gannimo @fabsx00 @ursachec @EranShimony @OcamRazr @LimitedResults @dcdelia @mattless_ @hookgab @Kapellmann @FlUxIuS
mattless_ retweeted
💡 Bit of advice for #ransomware devs... Use SetFilePointerEx, 🛑 NOT 🛑 SetFilePointer.
Don't be like AvosLocker, who fuck up tons of data in the middle of 4GB+ files because they ignore the high move value and return... Pays to read the damn documentation. 📚
mattless_ retweeted
When You sysWhisper Loud Enough for AV to Hear You - Hack.Learn.Share capt-meelo.github.io//redtea… via @CaptMeelo
