Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.13K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1392 · Back to latest

Older Posts 20 shown

Post #1391 456 May 12, 2025, 21:00 UTC

Alt Syscalls for Windows 11

https://fluxsec.red/alt-syscalls-for-windows-11

fluxsec.red Windows 11 Alternate Syscalls Deep Dive A comprehensive technical walkthrough of Windows 11 Alternate Syscalls: allocating executable thunks, building the dispatch table, patching PspServiceDescriptorGroupTable, handling PspSyscallProviderServiceDispatchGeneric, and caching syscall arguments. Includes…

👍 4
🔥 1

Post #1390 478 May 8, 2025, 19:23 UTC

What keeps kernel shadow stack effective against kernel exploits?

https://tandasat.github.io/blog/2025/04/02/sss.html

Satoshi’s notes What keeps kernel shadow stack effective against kernel exploits? This post introduces one of the virtualization features needed to keep kernel-mode shadow stack functional against kernel exploits: supervisor shadow stack restrictions / supervisor shadow-stack control.

👍 2

Post #1389 442 May 8, 2025, 12:59 UTC

AutoPatchBench, a benchmark for the automated repair of vulnerabilities identified through fuzzing

https://engineering.fb.com/2025/04/29/ai-research/autopatchbench-benchmark-ai-powered-security-fixes/

Engineering at Meta Introducing AutoPatchBench: A Benchmark for AI-Powered Security Fixes We are introducing AutoPatchBench, a benchmark for the automated repair of vulnerabilities identified through fuzzing. By providing a standardized benchmark, AutoPatchBench enables researchers and …

👍 3
🔥 2

Post #1388 418 May 3, 2025, 09:39 UTC

CrashFixer: A crash resolution agent for the Linux kernel

https://arxiv.org/pdf/2504.20412

🔥 3

Post #1387 422 May 2, 2025, 19:33 UTC

OSVBench: Benchmarking LLMs on Specification Generation Tasks for
Operating System Verification

https://arxiv.org/pdf/2504.20964

Post #1386 545 Apr 27, 2025, 21:20 UTC

Large Language Model-Driven Concolic Execution
for Highly Structured Test Input Generation

https://arxiv.org/pdf/2504.17542

👍 1

Post #1385 442 Apr 25, 2025, 06:59 UTC

Page-Oriented Programming: Subverting Control-Flow
Integrity of Commodity Operating System Kernels
with Non-Writable Code Pages

https://www.usenix.org/system/files/usenixsecurity24-han-seunghun.pdf

🔥 3

Post #1384 566 Apr 14, 2025, 19:09 UTC

A Framework for Evaluating Emerging Cyberattack Capabilities of AI by Google DeepMind

https://arxiv.org/pdf/2503.11917

Post #1383 431 Apr 8, 2025, 21:40 UTC

KernJC: Automated Vulnerable Environment Generation for Linux Kernel Vulnerabilities

https://i.blackhat.com/Asia-25/Asia-25-Ruan-KernJC.pdf

Post #1382 588 Mar 27, 2025, 20:26 UTC

2409.16165v2-2.pdf2.4 MB

Interactive Tools Substantially Assist LM Agents in Finding Security Vulnerabilities

Post #1381 462 Mar 25, 2025, 21:28 UTC

ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.

https://github.com/LaurieWired/GhidraMCP

GitHub GitHub - LaurieWired/GhidraMCP: MCP Server for Ghidra MCP Server for Ghidra. Contribute to LaurieWired/GhidraMCP development by creating an account on GitHub.

🔥 3

Post #1380 447 Feb 18, 2025, 13:14 UTC

Minimal LLM-based fuzz harness generator

https://adalogics.com/blog/minimal-llm-based-fuzz-harness-generator

👍 5

Post #1379 488 Feb 13, 2025, 06:56 UTC

Exploit Development: Investigating Kernel Mode Shadow Stacks on Windows

https://connormcgarr.github.io/km-shadow-stacks/

Connor McGarr’s Blog Exploit Development: Investigating Kernel Mode Shadow Stacks on Windows Using SourcePoint’s JTAG debugger to investigate the implementation of Intel CET Shadow Stacks in kernel-mode on Windows

🔥 3

Post #1378 955 Dec 17, 2024, 08:30 UTC

The plugin provides a custom navigation interface within IDA. It examines execution paths from entry points, breaks down the binary into clusters of related functions, and highlights downstream behaviors and artifacts for quicker insights. XRefer can incorporate external data (e.g., API traces, capa results, user-defined xrefs) and provides path graphs for richer context. It integrates with Google's Gemini model to produce natural language descriptions of code relationships and behaviors. Additionally, XRefer can provide cluster based labels for functions, aiming to accelerate the manual static analysis process.

https://github.com/mandiant/xrefer