We are very happy to announce that our paper entitled "My Script Engines Know What You Did in The Dark: Enhancing Engines into Script API Tracer" has been accepted at the ACSAC 2019 in Puerto Rico. We hope to see you at the conference!
acsac.org/2019/program/
@ACSAC_Conf
t.usui retweeted
We released IDA Freeware 7.0 for Windows/Linux/Mac: hex-rays.com/products/ida/su…
A bit interesting point of this sample is that it seems to have two ROP chains: for 32bit and 64bit.
C:\Users\{Username}\AppData\Roaming\Microsoft\Word\STARTUP\..wll is one IOC of this CVE-2017-11826 sample.
xitter.cf/0x009AD6_810/status/91…
This CVE-2017-11826 sample exploits with RETsled and ROP using msvbvm60.dll. EMET ROPGuard probably stops it.
xitter.cf/0x009AD6_810/status/91…
t.usui retweeted
UniversalROP is a new smart ROP tool to generate exploitation gadgets using @unicorn_engine & Z3 solver.
github.com/kokjo/universalro…
t.usui retweeted
1345 commits!!
Thank you all!
Yara Rules Project Team
yararules.com
t.usui retweeted
My first tutorial series on ARM Assembly Basics is finally finished. If you're new to ARM, this tutorial is for you:
azeria-labs.com/writing-arm-…
I plan to conduct a quantative analysis on rtfobj and rtfdump for their object extraction abilities against malicious RTFs.