Sounds like a pretty awesome intern :)
In 2018 we had a summer intern who stumbled across a trove of macOS kernel vulnerabilities known as Intel Graphics.
Here's how we exploited just one out of these dozens of issues to escape the Apple Safari sandbox at Pwn2Own 2021: blog.ret2.io/2022/06/29/pwn2…
1
40
Stefan Blair retweeted
Deus x64 (deusx64.ai) is a series of increasingly difficult reverse-engineering and binary exploitation challenges. It launches on September 15th.
Will you have what it takes to reach the end?
9
217
708
Stefan Blair retweeted
All Your Base Are [Still] Belong To Us: Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers blog.ret2.io/2021/07/21/wtf-…
1
172
560
Stefan Blair retweeted
Fortunately this http.sys bug was an internal find by our team. This one thanks to @_mxms, @fzzyhd1 and everyone who contributes to our tooling and automation.
Happy Patch Tuesday! #Adobe and #Microsoft have released their regularly scheduled updates, and @dustin_childs has all the details of the bugs squashed this month - including a wormable bug in http.sys. bit.ly/33xsfxl
1
17
62
Stefan Blair retweeted
I organized my notes and made it into slides when I learn about segment heap .
If you find something wrong, please let me know.
Hope it can be helpful fo those who want to learn segment heap in windows kernel.
speakerdeck.com/scwuaptx/win…
2
172
476
Stefan Blair retweeted
Thank you to everyone who played Hack The Vote 2020, we thoroughly enjoyed putting it together. If you didn’t get a chance to check out the CTF, this was our website.
The source code and author solutions for most of the challenges will also be released.
3
15
Stefan Blair retweeted
Sorry for belated announce, CTF lovers!
The 2020th edition of TokyoWesterns CTF is finally coming! (ctf.westerns.tokyo)
Registration is open at score.ctf.westerns.tokyo, stay tuned :)
18
29
Stefan Blair retweeted
Hack The Vote 2020:
1f4c39986543fb0475c2403e55dd622c9e4dbea67fdeb932406fdc3a9e26253c
2
9
Stefan Blair retweeted
In our last stream, we discussed the basics of embedded devices, threat modelling, and secure boot-chains. In our next stream held this Friday at 6pm EST, we will be applying these fundamental concepts using the Nintendo Switch as a case study. piped.video/C6ZI4lt-TRQ
15
22
Stefan Blair retweeted
Interested in computer security but could never make it to our meetings? In a virtual workshop held this Friday at 6pm EST, we will be teaming up with RPI's acm-w branch to deliver a beginner friendly introduction to our club and what we do.
piped.video/5wf2tqQivL0
11
26
Stefan Blair retweeted
We are cooking up some fun things for this, so make sure to have your pwntools..., erm, ballots ready for this fall...
New CTF!
Hack The Vote 2020 organized by @rpisec, starts at 2020-10-23 23:00:00 UTC
ctftime.org/event/1017/
10
27
Stefan Blair retweeted
New CTF!
Hack The Vote 2020 organized by @rpisec, starts at 2020-10-23 23:00:00 UTC
ctftime.org/event/1017/
7
19
Stefan Blair retweeted
Check out our new blog post on injecting into 32bit macOS processes on Mojave - rpis.ec/blog/mach_inject_32-…
18
61
Stefan Blair retweeted
Just announced: I'm teaching Modern Binary Exploitation at @reconmtl for the second year in a row. We'll go from first local exploit with no mitigations to a remote exploit using ROP chains against a target with ASLR, NX, and stack canaries. Details here: recon.cx/2020/montreal/train…
1
5
23
Stefan Blair retweeted
I'm honored to have been asked to speak at Typhoon Con this year!
It will be my first time in Korea and I am looking forward to presenting my Forget the Sandbox Escape talk (including some research I couldn't fit into my Bluehat talk :D )
🌪Announcement🌪
We're excited to announce that Amy Burnett (@itszn13) of RET2 Systems is one of our upcoming speakers at #TyphoonCon2020!
typhooncon.com/speakers-2020…
2
6
38