Static instrumentation based on executable file formats http://romainthomas.fr/slides/18-06-Recon18-Formats-Instrumentation.pdf #reverse #dukeBarman

Unpacking and Extracting TrickBot Malware Configuration With x64dbg and Python https://www.youtube.com/watch?v=EdchPEHnohw #malware #dukeBarman

http://blog.ret2.io/2018/06/19/pwn2own-2018-root-cause-analysis/ #stek29

https://www.malwaretech.com/beginner-malware-reversing-challenges #malware #hackquest #crackme #dukeBarman

Meaningful Variable Names for Decompiled Code: A Machine Translation Approach https://cmustrudel.github.io/papers/icpc18decompilation.pdf #reverse #decompilation #dukeBarman

A Mathematical Modeling of Exploitations and Mitigation Techniques Using Set Theory Paper: http://spw18.langsec.org/papers/Kawakami-Exploit-modeling-using-set-theory.pdf Slides: http://spw18.langsec.org/slides/Kawakami-Exploit-modeling-using-set-theory.pdf #exploit #dukeBarman

Android Crackme and Structure offset propagation http://radare.today/posts/crackme_with_tl/ #radare2 #android #dukeBarman

Detecting Kernel Memory Disclosure – Whitepaper

https://googleprojectzero.blogspot.com/2018/06/detecting-kernel-memory-disclosure.html

http://j00ru.vexillium.org/papers/2018/bochspwn_reloaded.pdf

#expdev #darw1n

https://versprite.com/blog/application-security/frida-engage-part-one-building-an-elf-parser-with-frida/ #frida #dukeBarman

Analyzing an Integer Overflow in Bitdefender AV (CVE-2017-17408).

Part 1 (Vulnerability): https://www.zerodayinitiative.com/blog/2018/6/19/analyzing-an-integer-overflow-in-bitdefender-av-part-1-the-vulnerability
Part 2 (PoC): https://www.zerodayinitiative.com/blog/2018/6/21/analyzing-an-integer-overflow-in-bitdefender-av-part-2-the-exploit

#expdev #darw1n

Bootloader research tools (very much a work in progress) https://github.com/bx/bootloader_instrumentation_suite #radare2 #reverse #dukeBarman

Google CTF is coming!
https://ctftime.org/event/623/ #ctfchat

BSides London 2018 https://www.youtube.com/playlist?list=PLcrUMxzVpi6zlT5Eecqpf7iabwYhu0Ve2 #video #conference #dukeBarman

Kernel Forensics and Rootkits https://www.tophertimzen.com/resources/cs407/slides/week06_01-Rootkits.html#slide1 #rootkits #dukeBarman

Amat Cama - A Walk With Shannon- A walkthrough of a PWN2OWN Baseband exploit https://github.com/comaeio/OPCDE/blob/master/2018/Kenya/Amat%20Cama%20-%20A%20Walk%20With%20Shannon-%20A%20walkthrough%20of%20a%20PWN2OWN%20Baseband%20exploit.pdf #hardware #dukeBarman

Basics of Anti Reverse Engineering https://medium.com/@Andromeda./basics-of-anti-reverse-engineering-9173826f1914 #reverse #dukeBarman

https://habr.com/company/dsec/blog/353800/ #malware #vba #dukeBarman

CVE-2018-6851 to CVE-2018-6857: Sophos Privilege Escalation Vulnerabilities https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ #expdev #lpe #darw1n

Article: "MINDSHARE: VARIANT HUNTING WITH IDA PYTHON" About IDA Python. https://www.zerodayinitiative.com/blog/2018/6/26/mindshare-variant-hunting-with-ida-python #idapython #dukeBarman

Radare2 team https://github.com/radare/radare2 asks for help :

"Since one of our students is working very hard on variables detection and types propagation in radare2, you can help him, by taking radare2 from git, checking how it detected function arguments and variables. Basically like this - "r2 some_bin", then "aaa; afta", then scroll in visual mode. If you find issues - please open a bug in radare2 github or just send me a sample with denoscription what was wrong."

https://github.com/a1ext/ida-embed-arch-disasm #reverse #ida #KosBeg