0xor0ne

Rooting the TP-Link Tapo C200 Rev.5

Let’s explore ways to mod a Tapo C200 Rev.5 firmware in order to gain root access to a running device.

GitHub - 0xor0ne/awesome-list: Cybersecurity oriented awesome list

Cybersecurity oriented awesome list. Contribute to 0xor0ne/awesome-list development by creating an account on GitHub.

projectzero.google

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

Over the past few years, several AI-powered features have been added to mobile phones that allow ...

Linux Privilege Escalation

Learn the concepts and misconfiguration in Linux operating system that could lead to privilege escalation

HN Security

HN Security - Fault Injection - Down the Rabbit Hole -

Intro This series of articles describes fault injection attack techniques in order to understand their real potential by testing their […]

A "Gau-Hack" from EuskalHack

A "Gau-Hack" from EuskalHack

awesome-list/topics/cybersec.md at main · 0xor0ne/awesome-list

Cybersecurity oriented awesome list. Contribute to 0xor0ne/awesome-list development by creating an account on GitHub.

ROPing our way to RCE

My Emulation Goes to the Moon... Until False Flag — retooling_

Linux syscall tables

High-quality browsable Linux kernel syscall tables for multiple architectures

Claroty

Inside a New OT/IoT Cyberweapon: IOCONTROL

Team82 has researched a malware sample called IOCONTROL linked to an Iran-based attack group used to target IoT and OT civilian infrastructure in the U.S. and Israel.

Declawing PUMAKIT

PUMAKIT is a sophisticated loadable kernel module (LKM) rootkit that employs advanced stealth mechanisms to hide its presence and maintain communication with command-and-control servers.

STAR Labs

io_uring - new code, new bugs, and a new exploit technique

For the past few weeks, I have been working on conducting N-day analysis and bug hunting in the io_uring subsystem of the Linux kernel with the guidance of my mentors, Billy and Ramdhan. In this article, I will briefly discuss the io_uring subsystem, as well as my approach to discovering and developing a new kernel exploit technique during my N-day analysis of CVE-2021-41073. I will also discuss two bugs I found while analyzing a new io_uring feature.

Everyday Ghidra: Ghidra Data Types— When to Create Custom GDTs — Part 1

In this 2-part “Everyday Ghidra” series post, we’ll walk through creating custom Ghidra data types by parsing C header files. In Everyday…