@_pox_

Doing Android stuff, mostly Security

Joined January 2016
  • Tweets339
  • Following397
  • Followers558
#Zer0Con2022 was amazing. Thanks to @POC_Crew and @vangelis_at_POC for hosting the conference and for your hospitality, it was perfect. Looking forward to the next ones!
4
23
Last speaker of the day! Thanks Andrea (@_pox_) for decorating! He’s now talking about Android JNI fuzzing. #Zer0Con2022
2
6
35
blackhat.com/us-21/briefings… me and @0xKira233 at @BlackHatEvents - @keen_lab
7
38
5
236
Experimental Security Assessment of Mercedes-Benz Cars by Tencent Security Keen Lab: keenlab.tencent.com/en/2021/…
3
57
5
143
Congratulations to our own @bkth_ and @_niklasb !
TrendAI Zero Day Initiative
@thezdi7 Apr 2021
Confirmed! The @dfsec_it team of @bkth_ & @_niklasb used a Typer Mismatch bug to exploit the #Chrome renderer and #Microsoft #Edge. They earn $100,000 total and 10 Master of Pwn points. #Pwn2Own
1
9
59
Today we publish the details of a fault injection vulnerability affecting the MediaTek BootROM. We achieved code execution in the context of the Preloader, fully circumventing secure boot. Unpatchable. There’s a hole in your SoC: research.nccgroup.com/2020/1…
7
152
8
337
A malicious picture can trigger an Instagram vulnerability potentially resulting in RCE on mobile devices. Read our full technical paper here: research.checkpoint.com/2020…

#Instagram_RCE: Code Execution Vulnerability in Instagram App for Android and iOS - Check Point...

Research by: Gal Elbaz Background Instagram, with over 100+ million photos uploaded every day, is one of the most popular social media platforms. For that reason, we decided to audit the security of...

research.checkpoint.com
1
179
8
336
Some weekend fun with netgear r7800 unauth rce as root #pwn2cringe
8
39
1
262
KeenLab released the latest 5G security research demo : youtu.be/Ca9lPMMToi0
3
74
2
167
Get up close and personal with Android's NFC stack in @mmolgtm's post on how to find vulnerabilities in Android NFC through targeted fuzzing. bit.ly/2Wlt9tD
20
1
54
Another nice binder bug patched in Android today (CVE-2020-0041, originally reported by @bluefrostsec). The upstream patch has been public since December 13: lore.kernel.org/lkml/2019121…
45
1
123
Congratz @aurelsec!!! 😎🥳
Aurélien Francillon@aurelsec25 Feb 2020
Very honored to receive a Google Faculty Research Award! Looking forward to work on this exciting project! And congrats to my @EURECOM colleague @paolopapotti who also got one !
1
1
Experimental Android MTE (ARM Memory Tagging) support has landed in Scudo -- reviews.llvm.org/D70762
13
1
27
Exploring the MediaTek Baseband by @marcograss and Kira (Xingyu Chen) offensivecon.org/speakers/20…
1
10
43
blog.flanker017.me/text-to-s… Text-To-Speech speaks pwned: writeup for CVE-2019-16253, how a benign TTS language pack lead to system shell.

Text-To-Speech speaks pwned

Text-To-Speech engine is a default enabled module in all Android phones, and exists up to Android 1.5 HTC era, even acting as a selling point at that time. But various vendor implementations may le…

blog.flanker017.me
36
3
70
Want to win Pwn2Own without all the hassle of having to spend time finding bugs? We finally got round to sorting out and releasing Jandroid - a tool for helping to find logic bugs in Android apps (and just in time for next week!) labs.f-secure.com/blog/autom…
3
121
5
340
The second writeup: examining and exploiting android vendor binder services-part1. Writeup for CVE-2018-9143, plus an interesting reversing quirk: where is my vtable? blog.flanker017.me/examining…

Examining and exploiting android vendor binder services – part1

Vendor binder services proved to be an interesting part of android devices nature. They usually remains close-source, but sometimes open new attack surface for privilege escalation. In these articl…

blog.flanker017.me
64
2
140
Who needs 0days when you have Nyears never backported from upstream to Android kernels. Btw officially surprised that Google & QC/caf missed to backport a binder security patch.
1
8
Analysis #EvilParcel vulnerabilities used in #Android #InfectionAds #Trojan habr.com/en/company/drweb/bl…
7
10
This python package is bomb - best way to interface with an Android device and reliably get adb functions to work programmatically pypi.org/project/pure-python…

pure-python-adb

Pure python implementation of the adb client

pypi.org
1
44
90
Load more