Audit of Cloud Native Buildpacks IntroductionThe Cloud Native Buildpacks (also kn... 2024-7-16 06:0:0 | 阅读: 4 | 收藏 | Quarkslab's blog - blog.quarkslab.com cloud security buildpacks quarkslab

Let’s Go into the rabbit hole (part 3) — the challenges of dynamically hooking Golang programs Golang is the most used programming language for developing cloud... 2024-7-9 06:0:0 | 阅读: 6 | 收藏 | Quarkslab's blog - blog.quarkslab.com library cgocall memory

Looking for vulnerabilities in Strapi (CVE-2024-34065) Discovery of two vulnerabilitie... 2024-6-25 06:0:0 | 阅读: 21 | 收藏 | Quarkslab's blog - blog.quarkslab.com strapi grantconfig microsoft

Recovering an ECU firmware using disassembler and branches This blogpost explains how we recovered the firmware of a fleet-sh... 2024-6-18 06:0:0 | 阅读: 6 | 收藏 | Quarkslab's blog - blog.quarkslab.com clusters sectors fat emmc instr

Let’s Go into the rabbit hole (part 2) — the challenges of dynamically hooking Golang programs Golang is the most used programming language for developing cloud... 2024-6-11 06:0:0 | 阅读: 8 | 收藏 | Quarkslab's blog - blog.quarkslab.com addgo b001 packagefile cfunc

How malware authors play with the LNK file format We did a quick study on the most common ways to deliver malware th... 2024-5-30 06:0:0 | 阅读: 9 | 收藏 | Quarkslab's blog - blog.quarkslab.com itemid windows itu shortcut

Audit of Kuksa, the open-source shared building blocks for Software Defined Vehicles Eclipse KUKSA's committers, with support from Eclipse Foundation,... 2024-5-21 06:0:0 | 阅读: 7 | 收藏 | Quarkslab's blog - blog.quarkslab.com databroker kuksa eclipse quarkslab protobuf

Audit of Allbridge Estrela Allbridge, with support from th... 2024-5-7 06:0:0 | 阅读: 11 | 收藏 | Quarkslab's blog - blog.quarkslab.com allbridge soroban stablecoins stellar security

Emulating RH850 architecture with Unicorn Engine Analyzing an automotive ECU firmware is sometimes quite challengin... 2024-4-30 06:0:0 | 阅读: 11 | 收藏 | Quarkslab's blog - blog.quarkslab.com tcg rh850 memory unicorn i32

Non-Compliant, So What? In cryptography audits, we often find vulnerabilities labeled as l... 2024-4-25 06:0:0 | 阅读: 14 | 收藏 | Quarkslab's blog - blog.quarkslab.com security primitives attacker

Hydradancer: Faster USB Emulation for Facedancer read file error: read notes: is a directory... 2024-4-18 06:0:0 | 阅读: 41 | 收藏 | Quarkslab's blog - blog.quarkslab.com hydradancer facedancer usb2 usb3 hydrausb3

Passbolt: a bold use of HaveIBeenPwned Passbolt, an Open Source Password Manager, is using the Pwned Pass... 2024-4-17 06:0:0 | 阅读: 27 | 收藏 | Quarkslab's blog - blog.quarkslab.com pelican passwords passbolt partial textrm

Reversing Windows Container, episode II: Silo to Server Silo This second article describes how to convert a Silo into a Server... 2024-3-26 07:0:0 | 阅读: 10 | 收藏 | Quarkslab's blog - blog.quarkslab.com silo ptr64 silos windows

Reversing Windows Container, part II: Silo to Server Silo This second article describes how to convert a Silo into a Server... 2024-3-26 07:0:0 | 阅读: 12 | 收藏 | Quarkslab's blog - blog.quarkslab.com silo ptr64 silos windows

Solving SandboxAQ's Post-Quantum Crypto CTF In March 2024, SandboxAQ propos... 2024-3-22 07:0:0 | 阅读: 17 | 收藏 | Quarkslab's blog - blog.quarkslab.com kyber client poly rr d4

Exploiting GLPI during a Red Team engagement The following article explains how during a Red Team engagement we... 2024-3-21 07:0:0 | 阅读: 19 | 收藏 | Quarkslab's blog - blog.quarkslab.com php glpi pinned itemtype

Audit of Allbridge Core Allbridge's maintainers, with s... 2024-3-19 07:0:0 | 阅读: 15 | 收藏 | Quarkslab's blog - blog.quarkslab.com allbridge stellar soroban quarkslab security

Leveraging Sourcetrail to a mapping tool, meet Numbat and Pyrrha Ever wanted to find a nice tool to easily represent cartography re... 2024-3-7 07:0:0 | 阅读: 13 | 收藏 | Quarkslab's blog - blog.quarkslab.com numbat sourcetrail pyrrha database analysis

Leveraging Sourcetrail to a mapping tool, meet Numbat and Pyrrha Ever wanted to find a nice tool to easily represent cartography re... 2024-3-7 07:0:0 | 阅读: 13 | 收藏 | Quarkslab's blog - blog.quarkslab.com numbat sourcetrail pyrrha database python

BGE Attack on AES White-Boxes: Extending Blue Galaxy Energy for Decryption and Shuffled States We announce the release of a ne... 2024-2-29 07:0:0 | 阅读: 15 | 收藏 | Quarkslab's blog - blog.quarkslab.com bge shuffled limitations identify