EMFI adventure part 2: target characterization of a STM32H5 errno.fr/EM_Fault_Injection_…
Wrote an article on getting started with ElectroMagnetic Fault Injection (EMFI) for a few dozen bucks errno.fr/EMFI_basics
Wrote an article on exploiting a partially hardened STM32H5 by using gadgets from the ROM code:
errno.fr/Overflowing_STM32H5…
Wrote an article on Privescing a BitLocker + PIN-Encrypted Company Laptop:
errno.fr/Bitlocker_TPM_and_P…
A few IDA tips to reverse engineer U-Boot: errno.fr/IDA_tips_for_revers…
Cool article by PT Swarm on the history and future of DMA attacks:
swarm.ptsecurity.com/new-dog…
I wrote an article on the knowledge, time and money needed to perform a chip off attack:
errno.fr/NAND_chip_off_attac…
Bruteforcing Jenkins' keys, an addendum to CVE-2024-23897:
errno.fr/bruteforcing_CVE-20…
I wrote an article on Dependency Confusions in Docker:
errno.fr/DockerDependencyCon…
Bunch of vulns I found last year in Control-M Web:
errno.fr/ControlMWebAdvisory…
I wrote an article on bypassing BitLocker on a Lenovo laptop:
errno.fr/BypassingBitlocker
New article "The oldest privesc: injecting careless administrators’ terminals using TTY pushback": errno.fr/TTYPushback.html
gquere retweeted
If you want to play with an Active Directory lab.
Here is the "Game Of Active Directory" project.
Still a lot of stuff to add but already fun to play with ;)
github.com/Orange-Cyberdefen…
My security advisory for DELL EMC VNX products: errno.fr/VNX_advisory