lolcads tech blog

Exploits built around heap-based memory corruptions will never be perfectly reliable.

Introduction Existing network fuzzing solutions struggle on all fronts.

Introduction In the face of increasing amounts of cyber threats, organizations employ security information and event management (SIEM) systems as a way to collect and analyze information at a central place to detect and counteract against potential cybera…

Firmware reverse engineering comes with some unique challenges compared to the reversing of programs that run in the user space of some mainstream operating system.

This post is about some work that I did on automatic profile generation for memory forensics of Linux systems.

Cyber Adversary Emulation Cyber adversary emulation is an assessment method where tactis, techniques, and procedures (TTPs) of real-world attackers are used to test the security controls of a system.

Bytecode Reuse Attack (Part 4) As last blog post on bytecode - based exploitation on Android, the next step following bytecode injection is discussed, namely: bytecode reuse.

Bytecode Injection (Part 3) With all the basics out of the way, this blog post shows the first bytecode - based exploitation technique on Android: bytecode injection!

Fundamentals for Bytecode Exploitation (Part 2) Exploiting a vulnerability always requires a certain knowledge about the operating system, including how processes are launched, what libraries are used and how control - flow “works”.

Introduction to Android Bytecode Exploitation (Part 1) Android resides among the most popular operating systems for mobile devices, which causes Android to also be among the most popular targets for exploitation.

Attempting Timing Attacks against Scudo In this second blog post we will take a different approach for attacking Scudo , i.e. we will try to the measure execution times for calls to malloc and hope to be able to derive a portion of the internal state of t…

Binary Exploitation for Scudo Heap Allocator on Android In this series of blog posts, we will investigate how an attacker may leverage the internals of the Scudo Allocator in order to obtain an advantage on an Android OS.

Exploitation of Use - After - Free Modules In this post we will be discussing how to exploit a Use - After - Free bug in both UseAfterFreeExecModule and UseAfterFreeWriteModule.

Exploitation of EasyStackBufferOverflowModule This article describes exploitation of the EasyStackBufferOverflowModule.

Android Binary Exploitation In this post, we will examine security mechanisms that Android 12 employs in order to make binary exploitation a bit harder.

PowerView is evil, but PowerVi and ew are legit, right?

BPF Memory Forensics with Volatility 3 Introduction and Motivation Have you ever wondered how an eBPF rootkit looks like?

Investigating Binary Exploitation for JNI on Android This post aims to be an introduction into a blog series about binary exploitation on Android.

Encryption - a curse and a blessing at the same time Digital communication in today’s world has a particularly high status in our society.

Make Frida Great Again In order to analyse binaries on e.g.

Intro This blog post reflects our exploration of the Dirty Pipe Vulnerability in the Linux kernel.

In this blog post I will go in depth into the inner workings of CVE-2021-43247 , which was fixed on the 14th of December 2021.

Installing new .NET versions on a Windows 7 VM In this post, I will explain how to install .NET Framework 4.8 on a Windows 7 VM.

Fuzzing Network Applications with AFL and libdesock Fuzzing network servers with AFL is challenging since AFL provides its input via stdin or command line arguments while servers get their input over network connections.

Written in Go, Hugo is an open source static site generator available under the Apache Licence 2.0.