Abusing page table entries for exploiting Linux ptr-yudai.hatenablog.com/entry/2025/0... #Linux #infosec

Interesting short blog post on how electronic passports cryptography works blog.trailofbits.com/2025/10/31/t... Credits Joop van de Pol #infosec #embedded

Analysis and exploitation of a Use-After-Free vulnerability in the Linux network packet schedule (CVE-2025-38001) syst3mfailure.io/rbtree-famil... #infosec #Linux

XLoader malware analysis with generative AI research.checkpoint.com/2025/generat... #infosec #malware

Valve Anti-Cheat (VAC) reverse engineering codeneverdies.github.io/posts/gh-2/ #cybersecurity

Apple SEAR is hiring offensive security researchers! We’re looking for talented researchers across multiple areas of security. Check out the job description here: jobs.apple.com/en-us/detail... Feel free to reach out if you have any questions. #infosec

Great deep-dive on AMD Zen microcode hacking and a signature-validation flaw bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking #infosec

Collection of blog posts, write-ups, papers and tools related to cybersecurity, reverse engineering and exploitation github.com/0xor0ne/awes... #cybersecurity #infosec

Presentations about getting started with Linux kernel exploitation "Linux Kernel Exploitation for Beginners" by Kevin Massey: rvasec.com/slides/2025/... "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov pt-phdays.storage.yandexcloud.net/Yashnikov_Va... #Linux #infosec

Teardown and exploitation of the Nokia Beacon 1 Router spaceraccoon.dev/nokia-beacon... #iot #infosec

Synology TC500 smart camera: Remote code execution (RCE) vulnerability blog.infosectcbr.com.au/2025/08/01/e... #infosec #embedded

Excellent blog post on bypassing Ubuntu’s Unprivileged Namespace Restriction u1f383.github.io/linux/2025/0... #infosec

Short introduction to Windows heap exploitation mrt4ntr4.github.io/Windows-Heap... #infosec

Fault injection for secure boot bypass and secret extraction targeting RP2350 www.usenix.org/system/files... #infosec

3-parts series on vulnerability research and exploitation of the SMB3 Linux Kernel Server (ksmbd) Part 1: blog.doyensec.com/2025/01/07/k... Part 2: blog.doyensec.com/2025/09/02/k... Part 3: blog.doyensec.com/2025/10/08/k... #infosec

Exploiting a libANGLE offset integer underflow read the Chrome WebGPU heap qriousec.github.io/post/oob-angle #infosec

Worldline Yomani XR payment terminal reverse-engineering and security analysis stefan-gloor.ch/yomani-hack #embedded #infosec

Exploiting vulnerabilities in Supermicro BMC (CVE-2025-7937 and CVE-2025-6198) www.binarly.io/blog/broken-... Credits Anton Ivanov #infosec

Breaking Server SGX via DRAM Bus Interposition wiretap.fail #infosec

Analysis of GrapheneOS hardened malloc libc allocator www.synacktiv.com/en/publicati... Credits Nicolas Stefanski #infosec

Flipping the R/W bit in the page table entry of a mapped file to gain write access ptr-yudai.hatenablog.com/entry/2025/0... #Linux #infosec

Exploiting CVE-2024-50264, a Linux kernel UAF vulnerability due to a race condition in AF_VSOC sockets a13xp0p0v.github.io/2025/09/02/k... #infosec #Linux

Reliable Linux system call interception blog.mggross.com/intercepting... #cybersecurity #Linux

Devirtualizing VMProtect and Themida nac-l.github.io/2025/01/25/l... #infosec #reverseengineering

Practical guide to fuzzing the Binder kernel driver using the Linux Kernel Library (LKL) androidoffsec.withgoogle.com/posts/binder... Credits Eugene Rodionov, Gulshan Singh and Zi Fan Tan #infosec #android

Reverse engineering and decryption of Synology encrypted archives www.synacktiv.com/en/publicati... Credits Théo Fauché #infosec

Two parts series on hacking the Xbox 360 hypervisor Part 1: icode4.coffee?p=1047 Part 2: icode4.coffee?p=1081 #infosec #xbox

Exploiting an array-Out-Of-Bounds vulnerability in the Linux network packet scheduler (CVE-2025-37752) syst3mfailure.io/two-bytes-of... #infosec #Linux

Exploiting Linux kernel from Chrome renderer with MSG_OOB (Google Project Zero) googleprojectzero.blogspot.com/2025/08/from... #infosec #chrome

Security analysis of Sonoff Smart Home IoT devices (CVE-2024-7205 and CVE-2024-7206) jerinsunny.github.io/blogs/iotsec... Credits Jerin Sunny and Shakir Zari #iot #infosec

Porting a Mali GPU exploit to Pixel 6 Pro (CVE-2023-48409) starlabs.sg/blog/2025/06... #cybersecurity #mobile

"Challenges and Pitfalls while Emulating Six Current Icelandic Household Routers" Evaluation of different tools for routers firmware emulation (FACT, QEMU, EMUX, Qiling, Firmadyne, FAT, FirmAE, Pandawan, and EMBA) skemman.is/bitstream/19... #cybersecurity #embedded

GDB over a serial connection for debugging the kernel on a Pixel 8 xairy.io/articles/pix... #infosec

FiberGateway GR241AG: root code execution through public wifi network r0ny.net/FiberGateway... #infosec #embedded

Root access on the TP-Link Tapo C200 Rev.5 quentinkaiser.be/security/202... #infosec #embedded

FiberGateway GR241AG home router: exploitation chain r0ny.net/FiberGateway... #infosec #embedded

Linux ELF symbols resolution and obfuscation blog.elmo.sg/posts/breaki... #infosec #Linux

Thermomix TM5 reverse engineering and exploitation www.synacktiv.com/en/publicati... #cybersecurity #iot

Getting started with Linux kernel exploitation (slide) "Linux Kernel Exploitation for Beginners" by Kevin Massey: rvasec.com/slides/2025/... "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov pt-phdays.storage.yandexcloud.net/Yashnikov_Va... #Linux #infosec

Series on hacking the Xbox 360 hypervisor Part 1: icode4.coffee?p=1047 Part 2: icode4.coffee?p=1081 #infosec #xbox

External fuzzing of USB drivers with Syzkaller docs.google.com/presentation... #infosec #fuzzing

Bypassing Ubuntu’s Unprivileged Namespace Restriction u1f383.github.io/linux/2025/0... #Linux #infosec

Security analysis of a Allen-Bradley (Rockwell Automation) PowerMonitor 1000 device claroty.com/team82/resea... #infosec

"My Emulation Goes to the Moon... Until False Flag" by Retooling Exploring the re-implementation of APT41 Scatterbrain's obfuscation retooling.io/blog/my-emul... #malware #cybersecurity

Exploiting a Tenda Ac8v4 SOHO router (Flow-control ROP -> RCE) 0reg.dev/blog/tenda-a... #infosec #embedded

"False Injections: Tales of Physics, Misconceptions and Weird Machines" (h2hconference keynote) raelize.com/upload/resea... #infosec

Introduction to Voltage Glitching (STM32L051 microcontroller) blog.syss.com/posts/voltag... #hardware #infosec

Introduction to voltage glitching attacks security.humanativaspa.it/fault-inject... Credits Maurizio Agazzini #hardware #cybersecurity

Full exploit chain for the FiberGateway GR241AG home router r0ny.net/FiberGateway... #infosec #embedded

Exploiting a use after free (CVE-2025-1050) in the Sonos Era 300 (Pwn2Own 2024) blog.ret2.io/2025/06/11/p... Credits Jack Dates & Markus Gaasedelen #infosec #embedded