mlaerten (@mlaerten) profile picture
Joined September 2011
Photo by mlaerten (@mlaerten)Photo by mlaerten (@mlaerten)Photo by mlaerten (@mlaerten)Photo by mlaerten (@mlaerten)Photo by mlaerten (@mlaerten)Photo by mlaerten (@mlaerten)
Perfect day for friends and baseball! #TimeToShine
I’m going to randomly pick 3 people who retweet this to receive a copy of the book. I’ll tweet out the winners tomorrow. I’ll also be giving away two more copies later this week complements of @RayRedacted! …and maybe a couple more next week just for university students
26
922
38
531
Visualization of a security bypass with a CVE > 9.8
11
163
8
642
Just a daily reminder, that the C / C++ compiler is happy to remove any code it thinks doesn't make sense according to the standard.
13
68
6
410
Every. Single. Piece. Of. Hardware. In. Congress. NEEDS. to. be. replaced. Nothing can be trusted.
187
5,010
701
19,202
Videos for Module 4 of pwn.college, Reverse Engineering, are UP! Check them out at pwn.college/modules/reversin…, or join us Wednesday at 2:30pm AZ time for a prerecorded stream on twitch.tv/pwncollege. The extended Q&A and collaboration is right after, at 4:30pm!
1
14
57
A book we all suspect exists and is an underground best seller 😂😂
20
184
17
724
mlaerten retweeted
We've added info about the starting times for each talk in the description box for each of the 4 videos #r2con2020 🎥 Day 1 youtu.be/sgNDYgLyAP4 🎥 Day 2 youtu.be/gUeL2JcCChM 🎥 Day 3 youtu.be/A9wodVpSFds 🎥 Day 4 youtu.be/6VYYf5ut638
24
50
Friday, 19:00 GMT+2 at #r2con2020: In a live coding, I will use @r2gui and @MiasmRe to automatically identify and remove opaque predicates in an APT malware sample. Check it out: rada.re/con/2020/youtube
3
11
3
40
VMWare WS & ESXi has recently patched a new VM escape bug in the vmxnet3 virtual network adapter (VMSA-2020-0015, July 2020). I leave it as an exercise for my training attendees to reverse engineer the new one ;)
I have reverse-engineered @VMWare's patch for the vuln in VMWare ESXi that was exploited at @GeekPwn 2018 to take it down for the first time. It's an uninitialized stack variable usage RCE in the host-side code of vmxnet3 network adapter. Binary diff via Workstation 15.0.0/15.0.1
2
47
149
Today @_Staubfinger presented his bachelor thesis on coverage-guided fuzzing of Siemens S7-1200 PLCs. The PLC firmware got instrumented and was sending coverage info back to the AFL fuzzer. This is probably the first public code-coverage guided fuzzers for S7 PLCs. @ProductCERT
3
22
2
64
mlaerten retweeted
We are happy to announce the #r2con2020 conference schedule 💥💥💥and updated website right after closing the CFP! 🎉🎉🎉radare.org/con/2020/assets/r… <<< 📄 [PDF]
87
3
159
GUYS I FEAR I MAY'VE BRICKED MY CONSOLE
76
3,226
77
15,248
You guys 🤣🤣🤣
9
51
6
225
I created Hacker Container with 50+ common security tools to help you in Containerised & Kubernetes Cluster Security Assessments. Would love to hear feedback/suggestions 🙂 Read more about it blog.madhuakula.com/hacker-c… #PenTesting #Docker #Kubernetes #Security #InfoSec #DevSecOps
14
218
4
590
mlaerten retweeted
I'm happy to announce the first public release of IDACode! Execute and debug all your IDA scripts from VS Code :) You can find the extension on the VS Code marketplace and the IDA plugin in the repository along with some information: github.com/ioncodes/idacode
13
250
6
668