@_esoj1 Profile picture

Esoj

@_esoj1

Pwning stuff

Joined July 2020
Similar User
Pietro Borrello photo

@borrello_pietro

Jordy Zomer photo

@pwningsystems

Matteo Rizzo photo

@_MatteoRizzo

faulty *ptrrr photo

@0x_shaq

celesian photo

@c3l3si4n

Bien 🇻🇳 photo

@bienpnn

inferigang photo

@inferigang

sam4k photo

@sam4k1

POC_Crew 👨‍👩‍👦‍👦 photo

@POC_Crew

Rodrigo Branco photo

@bsdaemon

Zhenpeng Lin photo

@Markak_

caioluders photo

@caioluders

Danis Jiang photo

@danis_jiang

Sector 7 photo

@sector7_nl

Luan Herrera photo

@lbherrera_

Esoj Reposted

Junte-se ao GRIS: Se você é estudante ou entusiasta da segurança da informação e deseja participar ativamente de pesquisas inovadoras ou competições de CTF, o GRIS é o lugar certo para você. Link do forms - docs.google.com/forms/d/19Cffu…


Esoj Reposted

Tavis found a fascinating architectural CPU bug 🐞

First big result from our new CPU research project, a use-after-free in AMD Zen2 processors! 🔥 AMD have just released updated microcode for affected systems, please update! lock.cmpxchg8b.com/zenbleed.html



Esoj Reposted

The video for the talk is available. I hope folks enjoy and feel free to send me feedback, comments, criticisms (privately or publicly, either way is welcome!)

🔼Keynote talk upload! 🖥️Hear out interesting lesser known µarch & hardware security stories by our Keynote speaker Rodrigo Branco @bsdaemon from his rich experience 📽️Click to watch▶️youtu.be/WlcQrx7VK00 #hw_ioUSA2023 #hardwaresecurity #Conference #microarchitecture



Esoj Reposted

The slides for my keynote at Hardwear.io are available (as all others) - it has a few less known stories on uarch/HW security: bit.ly/HardwearKeynot… @hardwear_io


In RET2ASLR we can leak ASLR from the BTB in under a minute. Plz use the speculation control feature for userspace applications dealing with sensitive data. docs.kernel.org/userspace-api/…


Esoj Reposted

Novo artigo em parceria com @mentebinaria ! É sobre segurança de OAuth 2.0! Confiram! Está bem legal! Autor: @vrechson mentebinaria.com.br/artigos/segura… Toda a produção da parceria está em epicleet.team/articles Se quer ler algo específico nos nossos artigos, comenta aí!


Esoj Reposted

Found some Spectre-v1/MDS gadgets in the Linux kernel at work with @fkaasan, including one in ‘copy_from_user’ 😁😁 github.com/google/securit…


Esoj Reposted

Google embargo on another linux kernel issue found by @_esoj1 and I finally lifted... here is the advisory: github.com/google/securit…


Esoj Reposted

So, @_esoj1 and I found another linux kernel spectre v2 mitigation problem (lkml.org/lkml/2023/2/20…). At this point: is there anyone who actually care? No one is testing?


Esoj Reposted

This finding by @_esoj1 and I just demonstrates how much the side channel issues are still misunderstood.

It turns out that the user-mode spectre-BTI mitigations were slightly broken since four years ago when they were introduced in prctl syscall... github.com/es0j/CVE-2023-…



Esoj Reposted

HEADS' member @_esoj1 (José Oliveira) has disclosed a previously unknown flaw in the Linux Kernel that allows the bypassing of Spectre-BTI mitigations. github.com/es0j/CVE-2023-…

Tweet Image 1

It turns out that the user-mode spectre-BTI mitigations were slightly broken since four years ago when they were introduced in prctl syscall... github.com/es0j/CVE-2023-…


Esoj Reposted

Apparently naming bugs really works on getting attention. So much that the name becomes the focus and folks fail to realize it is literally just a parody. Our industry is doomed.


Esoj Reposted

Bugs properly reported, time to go drink and celebrate all the blessings of the year, pray for the dreams to keep coming true and for health to family and loved ones. And for peace in the world.


Esoj Reposted

XSS 2 RCE on @flipper_zero Got RCE through an XSS on lab.flipper.net , here's the writeup thread github.com/caioluders/poc… (PoC Video, printing 1337 on the flipper screen)


Esoj Reposted

Da uma lida lá pessoal, deu trabalho escrever kkk, e fica ligado q logo tem mais posts sobre browser internals

Quer aprofundar seus conhecimentos sobre browser? Se liga na série de posts sobre e aproveita pra aprender sobre arquitetura de navegadores até compiladores JIT! harddisk.com.br/p/pt-br-browse… harddisk.com.br/p/pt-br-jit-lu…



Esoj Reposted

It's tomorrow. For sure, I ain't sleeping this night 💀

Tweet Image 1

Loading...

Something went wrong.


Something went wrong.