Tweetovi

	Andrea Fioraldi @andreafioraldi	2 h
	Odgovor korisniku/ci @GHSecurityLab Ok looking better at the implementation of QString is stack-use-after-scope for the same reason
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	3 h
	Odgovor korisniku/ci @GHSecurityLab Here to see that midRef uses this: github.com/radekp/qt/blob… Here to see how calls m_string->isNull() (where m_string is the freed Qstring ptr) code.woboq.org/qt5/qtbase/src…
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	3 h
	Odgovor korisniku/ci @GHSecurityLab This triggers an heap-use-after-free ASan error.
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	3 h
	Odgovor korisniku/ci @GHSecurityLab midRef creates a QStringRef using this (the QString instance). The QString instance is then freed cause its destructor is called and so in ref there is a QStringRef that maintains a ptr to freed memory. The ptr is not null, so it is dereferenced to call QString::isNull()
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	5 h
	The AFL++ website is up: aflplus.plus Very naive ATM, I'm open to suggestions.
	Prikaz sažetka ·

	Andrea Fioraldi @andreafioraldi	9 h
	Odgovor korisniku/ci @GaspareFerraro @itasec20 i 5 ostali pic.twitter.com/sn6rPhiNsK
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	10 h
	Odgovor korisniku/ci @val_brux Electron apps should be banned by law. It is inammissibile that an XSS may lead to RCE w/ o exploiting any other bug. Js is not for desktop.
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	21 h
	Odgovor korisniku/ci @MeBeiM Makes sense if incompatible with old GCCs.
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	22 h
	From a discussion with @MeBeiM , I noticed that this check in elixir.bootlin.com/linux/v4.20.17… was removed in the 5.x kernel. Does any kernel hacker know why? Accessing the stack belop SP remains a bug IMO. pic.twitter.com/nbKf8LEHNf
	Prikaz fotografije ·

	Andrea Fioraldi @andreafioraldi	4. velj
	Odgovor korisniku/ci @itasec20 @CyberSecNatLab i 5 ostali Actually, the quote on the slide is wrong. It should be "Cryptography in CTF is about searching for the right paper" and it is 100% true.
	Prikaz razgovora ·

	Andrea Fioraldi @andreafioraldi	4. velj
	Directly from the screens of the movie "hackers", we have a logo now twitter.com/domenuk/status…
	Prikaži podatke ·

	Andrea Fioraldi @andreafioraldi	3. velj
	I can't find a decent free Jekyll theme for the AFL++ GitHub pages. All are full of useless hipster JS. Do you know some minimal html5 theme (full page, not like these themes that use only the center) that looks like llvm.org or lwn.net or similar?
	Prikaži podatke ·

	Andrea Fioraldi @andreafioraldi	2. velj
	This can't happen with Motherfucking CTF (github.com/andreafioraldi…) cause there isn't password recovery. If you lose a password while playing a CTF, you deserve to loose 😂 twitter.com/RiftWhiteHat/s…
	Prikaz sažetka ·

	Andrea Fioraldi proslijedio/la je tweet
	CodeColorist @CodeColorist	2. velj
	VSCode x @fridadotre * VSCode based GUI * Interactive terminal * Remote file browser (Yes!) * Open source Not on market yet. But you can built it from the source: github.com/chichou/vscode… pic.twitter.com/sG5UhDy2Wd
	Prikaz fotografije ·

	Andrea Fioraldi proslijedio/la je tweet
	DC11396 • DEFCON Rome @defcon11396	2. velj
	~~~~ Update ~~~~ The slides of this Friday's meeting are now online. Download them from the website or from GitHub (github.com/DefconRome/mee…) /cc @defcon @defcongroups
	Prikaz sažetka ·

	Andrea Fioraldi @andreafioraldi	31. sij
	This afternoon don't miss our talks about @fridadotre and the @gamozolabs recent work on MDS for CPU instrospection. 👉 defcon11396.it//meetings/meet… twitter.com/defcon11396/st…
	Prikaži podatke ·

	Andrea Fioraldi @andreafioraldi	30. sij
	Happy to announce a new LLVM instrumentation for AFL++ called CmpLog that feeds the fuzzer with comparisons operands extracted with SanCov. github.com/vanhauser-thc/… I used it to build the Redqueen mutator in AFL++!
	Prikaz sažetka ·

	Andrea Fioraldi @andreafioraldi	30. sij
	So now we have also the power metal edition of mhackeroni/sourcloud. twitter.com/HackingForSoju…
	Prikaži podatke ·

	Andrea Fioraldi @andreafioraldi	30. sij
	Odgovor korisniku/ci @GHSecurityLab @Nosoynadiemas Nice write-up! Note that the AFL++ laf-intel module can also split floating-point comparisons using AFL_LLVM_LAF_SPLIT_FLOATS. This is available also in QEMU mode for x86/arm.
	Prikaz razgovora ·

	Andrea Fioraldi proslijedio/la je tweet
	GitHub Security Lab @GHSecurityLab	30. sij
	Do you know #aflplusplus? It brings interesting add-ons to AFL. @nosoynadiemas used it during his fuzzing research to create custom instrumentation whitelists, increasing AFL code coverage securitylab.github.com/research/fuzzi…
	Prikaz sažetka ·