defcon_27_windbg_workshop

"WinDbg Preview를 활용한 모던 디버깅" DEFCON 27 워크숍 이 저장소는 DEFCON 27 워크숍 자료를 포함하고 있습니다. 개요 요약 2019년인데도 여전히 너무 많은 Windows 개발자와 해커들이 Windows 바이너리 디버깅을 위해 유용하지만 다소 구식 도구OllyDbg, Immunity Debugger에 의존하고 있습니다. 그들은 Microsoft의 최신 WinDbg Preview 에디션에 포함된 매우 귀중한 도구와 기능을 놓치고 있다는 사실을 깨닫지 못하고 있습니다. 이 실습 중심 워크숍은 WinDb...

TripleCross - A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.

TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous implant designs in this area, notably the works of Jeff Dileo at DEFCON 271, Pat Hogan at DEFCON 292, Guillaume Fournier and Sylvain Afchain also at DEFCON...

Millions of Android Smartphones Vulnerable to Trio of Qualcomm Bugs

UPDATE Security researchers from Tencent’s Blade Team are warning Android smartphone and tablet users of flaws in Qualcomm chipsets, called QualPwn. The bugs collectively allow hackers to compromise Android devices remotely simply by sending malicious packets over-the-air – no user interaction...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking at Black Hat USA 2019 in Las Vegas on Wednesday, August 7 and Thursday, August 8, 2019. I'm speaking on "Information Security in the Public Interest" at DefCon 27 in Las Vegas on Saturday, August 10, 2019. The list is...