@_pox_

Doing Android stuff, mostly Security

Joined January 2016
  • Tweets339
  • Following397
  • Followers558
Last speaker of the day! Thanks Andrea (@_pox_) for decorating! He’s now talking about Android JNI fuzzing. #Zer0Con2022
2
6
35
blackhat.com/us-21/briefings… me and @0xKira233 at @BlackHatEvents - @keen_lab
7
38
5
236
Experimental Security Assessment of Mercedes-Benz Cars by Tencent Security Keen Lab: keenlab.tencent.com/en/2021/…
3
57
5
143
Congratulations to our own @bkth_ and @_niklasb !
TrendAI Zero Day Initiative
@thezdi7 Apr 2021
Confirmed! The @dfsec_it team of @bkth_ & @_niklasb used a Typer Mismatch bug to exploit the #Chrome renderer and #Microsoft #Edge. They earn $100,000 total and 10 Master of Pwn points. #Pwn2Own
1
9
59
Today we publish the details of a fault injection vulnerability affecting the MediaTek BootROM. We achieved code execution in the context of the Preloader, fully circumventing secure boot. Unpatchable. There’s a hole in your SoC: research.nccgroup.com/2020/1…
7
152
8
337
A malicious picture can trigger an Instagram vulnerability potentially resulting in RCE on mobile devices. Read our full technical paper here: research.checkpoint.com/2020…

#Instagram_RCE: Code Execution Vulnerability in Instagram App for Android and iOS - Check Point...

Research by: Gal Elbaz Background Instagram, with over 100+ million photos uploaded every day, is one of the most popular social media platforms. For that reason, we decided to audit the security of...

research.checkpoint.com
1
179
8
336
Some weekend fun with netgear r7800 unauth rce as root #pwn2cringe
8
39
1
262
KeenLab released the latest 5G security research demo : youtu.be/Ca9lPMMToi0
3
74
2
167
Get up close and personal with Android's NFC stack in @mmolgtm's post on how to find vulnerabilities in Android NFC through targeted fuzzing. bit.ly/2Wlt9tD
20
1
54
Another nice binder bug patched in Android today (CVE-2020-0041, originally reported by @bluefrostsec). The upstream patch has been public since December 13: lore.kernel.org/lkml/2019121…
45
1
123
Experimental Android MTE (ARM Memory Tagging) support has landed in Scudo -- reviews.llvm.org/D70762
13
1
27
Exploring the MediaTek Baseband by @marcograss and Kira (Xingyu Chen) offensivecon.org/speakers/20…
1
10
43
blog.flanker017.me/text-to-s… Text-To-Speech speaks pwned: writeup for CVE-2019-16253, how a benign TTS language pack lead to system shell.

Text-To-Speech speaks pwned

Text-To-Speech engine is a default enabled module in all Android phones, and exists up to Android 1.5 HTC era, even acting as a selling point at that time. But various vendor implementations may le…

blog.flanker017.me
36
3
70
pox retweeted
WithSecure Labs@FSecureLabs1 Nov 2019
Want to win Pwn2Own without all the hassle of having to spend time finding bugs? We finally got round to sorting out and releasing Jandroid - a tool for helping to find logic bugs in Android apps (and just in time for next week!) labs.f-secure.com/blog/autom…
3
121
5
340
The second writeup: examining and exploiting android vendor binder services-part1. Writeup for CVE-2018-9143, plus an interesting reversing quirk: where is my vtable? blog.flanker017.me/examining…

Examining and exploiting android vendor binder services – part1

Vendor binder services proved to be an interesting part of android devices nature. They usually remains close-source, but sometimes open new attack surface for privilege escalation. In these articl…

blog.flanker017.me
64
2
140
Who needs 0days when you have Nyears never backported from upstream to Android kernels. Btw officially surprised that Google & QC/caf missed to backport a binder security patch.
1
8
Analysis #EvilParcel vulnerabilities used in #Android #InfectionAds #Trojan habr.com/en/company/drweb/bl…
7
10
This python package is bomb - best way to interface with an Android device and reliably get adb functions to work programmatically pypi.org/project/pure-python…

pure-python-adb

Pure python implementation of the adb client

pypi.org
1
44
90
ATTACKING JAVA RMI SERVICES AFTER JEP 290 @h0ng10 mogwailabs.de/blog/2019/03/a…
24
48
Thanks to all the strong submissions to this year's Qualcomm Product Security Summit #QPSS19, the selection process is really difficult! Finally we got our list and it's available here, qct-qualcomm.secure.force.co…. Congrats to all the accepted talks!
2
24
4
33
Load more