RFID: New Proxmark3 Tear-Off Features and New Findings Latest news from the Proxmark3 world, crunchy bits included... IntroductionIt's oft... 2020-11-19 08:00:00 | 阅读: 205 | 收藏 | blog.quarkslab.com tear em4305 eeprom pr15 lf

How the MVSC Compiler Generates XFG Function Prototype Hashes Microsoft is currently working on Xtended Flow Guard (XFG), an evolved version of Contro... 2020-11-12 08:00:00 | 阅读: 198 | 收藏 | blog.quarkslab.com xfghelper xfghasher indirection compute

How the MSVC Compiler Generates XFG Function Prototype Hashes Microsoft is currently working on Xtended Flow Guard (XFG), an evolved version of Contro... 2020-11-12 08:00:00 | 阅读: 165 | 收藏 | blog.quarkslab.com xfghelper xfghasher indirection compute

Beware the Bad Neighbor: Analysis and PoC of the Windows IPv6 Router Advertisement Vulnerability (CVE-2020-16898) This blog post analyzes the vulnerability known as "Bad Neighbor" or CVE-2020-16898, a s... 2020-10-16 07:00:00 | 阅读: 215 | 收藏 | blog.quarkslab.com rdnss fffff802 4141 4242

Internships at Quarkslab 2020-2021: the COVID season We LOVE interns! Really. We love them because they bring fresh air to the company and be... 2020-10-15 07:00:00 | 阅读: 132 | 收藏 | blog.quarkslab.com internship kubernetes emulation hardware

Examining the August Smart Lock A blog post about the security implemented in the August Smart Lock, with special focus... 2020-09-10 07:00:00 | 阅读: 169 | 收藏 | blog.quarkslab.com attacker handshake security lockinfo

Introduction to Whiteboxes and Collision-Based Attacks With QBDI This post is a noob-friendly introduction to whiteboxes along with thepresentation and... 2020-08-18 07:00:00 | 阅读: 173 | 收藏 | blog.quarkslab.com collision whitebox plaintexts colliding collisions

Why are Frida and QBDI a Great Blend on Android? This blog post dives into how to get a better understanding ofan Android native functio... 2020-08-04 07:00:00 | 阅读: 199 | 收藏 | blog.quarkslab.com qbdi funcsym evt funcptr jni

A Deep Dive Into Samsung's TrustZone (Part 3) This third article from the Samsung's TrustZone series details some vulnerabilities that... 2020-07-02 07:00:00 | 阅读: 160 | 收藏 | blog.quarkslab.com ropchain trustlet samsung tci tlapi

Triton v0.8 and ARMv7: A Guideline for Adding New Architectures This blog post is a follow-up on the announcement of Triton v0.8, wherewe explain how w... 2020-06-25 07:00:00 | 阅读: 147 | 收藏 | blog.quarkslab.com triton armv7 operands capstone mutable

Playing Around With The Fuchsia Operating System A look at the new Fuchsia Operating System. IntroductionFuchsia is a new operating... 2020-06-09 07:00:00 | 阅读: 155 | 收藏 | blog.quarkslab.com zx userland fuchsia zircon security

Ansible Security Assessment Ansible is an open-source software automating configuration management and software depl... 2020-05-28 07:00:00 | 阅读: 196 | 收藏 | blog.quarkslab.com facts quarkslab security 6592143

How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard In the context of the Inter-CESTI 2019 challenge, we "accidentally" found a timing difference... 2020-05-12 07:00:00 | 阅读: 147 | 收藏 | blog.quarkslab.com hardware wookey nxp security timing

Reverse Engineering a VxWorks OS Based Router A blog post about how to reverse engineer a VxWorks based device. IntroductionEmbed... 2020-05-07 07:00:00 | 阅读: 222 | 收藏 | blog.quarkslab.com qos ar2315 bsp arc ar531xplus

Triton v0.8 is Released! We are pleased to announce that we released Triton v0.8 under the terms ofthe Apach... 2020-04-23 07:00:00 | 阅读: 160 | 收藏 | blog.quarkslab.com triton predicate armv7 symvar

CVE-2020-0069: Autopsy of the Most Stable MediaTek Rootkit In March 2020, Google patched a critical vulnerability affecting many MediaTek based dev... 2020-03-24 08:00:00 | 阅读: 174 | 收藏 | blog.quarkslab.com cmdq blocksize memory dma pvabase

PhD Defense of Jonathan Salwan: Use of Symbolic Execution for Binary Deobfuscation We are pleased to announce that Jonathan Salwan will defend his PhD thesisentitled Use o... 2020-02-13 08:00:00 | 阅读: 123 | 收藏 | blog.quarkslab.com cadre des les sur phd

Reverse Engineering a Philips TriMedia CPU based IP Camera - Part 3 Third part of a blog post series about our approach to reverse engineer a Philips TriMed... 2020-01-16 08:00:00 | 阅读: 144 | 收藏 | blog.quarkslab.com trimedia extoffset immediate formatbits

A Deep Dive Into Samsung's TrustZone (Part 2) In this second blog post of our series on Samsung's TrustZone, we present the various to... 2019-12-17 08:00:00 | 阅读: 150 | 收藏 | blog.quarkslab.com samsung trustzone reverse el3 detailing

A Deep Dive Into Samsung's TrustZone (Part 1) In this first article of a series of three, we will give a tour of the different compone... 2019-12-10 08:00:00 | 阅读: 170 | 收藏 | blog.quarkslab.com samsung trustzone kinibi nwd trustlet