Audit of Allbridge Estrela Allbridge, with support from th... 2024-5-7 06:0:0 | 阅读: 7 | 收藏 | Quarkslab's blog - blog.quarkslab.com allbridge soroban stablecoins stellar security

Emulating RH850 architecture with Unicorn Engine Analyzing an automotive ECU firmware is sometimes quite challengin... 2024-4-30 06:0:0 | 阅读: 6 | 收藏 | Quarkslab's blog - blog.quarkslab.com tcg rh850 memory unicorn i32

Non-Compliant, So What? In cryptography audits, we often find vulnerabilities labeled as l... 2024-4-25 06:0:0 | 阅读: 10 | 收藏 | Quarkslab's blog - blog.quarkslab.com security primitives attacker

Hydradancer: Faster USB Emulation for Facedancer read file error: read notes: is a directory... 2024-4-18 06:0:0 | 阅读: 23 | 收藏 | Quarkslab's blog - blog.quarkslab.com hydradancer facedancer usb2 usb3 hydrausb3

Passbolt: a bold use of HaveIBeenPwned Passbolt, an Open Source Password Manager, is using the Pwned Pass... 2024-4-17 06:0:0 | 阅读: 23 | 收藏 | Quarkslab's blog - blog.quarkslab.com pelican passwords passbolt partial textrm

Reversing Windows Container, episode II: Silo to Server Silo This second article describes how to convert a Silo into a Server... 2024-3-26 07:0:0 | 阅读: 6 | 收藏 | Quarkslab's blog - blog.quarkslab.com silo ptr64 silos windows

Reversing Windows Container, part II: Silo to Server Silo This second article describes how to convert a Silo into a Server... 2024-3-26 07:0:0 | 阅读: 8 | 收藏 | Quarkslab's blog - blog.quarkslab.com silo ptr64 silos windows

Solving SandboxAQ's Post-Quantum Crypto CTF In March 2024, SandboxAQ propos... 2024-3-22 07:0:0 | 阅读: 13 | 收藏 | Quarkslab's blog - blog.quarkslab.com kyber client poly rr d4

Exploiting GLPI during a Red Team engagement The following article explains how during a Red Team engagement we... 2024-3-21 07:0:0 | 阅读: 5 | 收藏 | Quarkslab's blog - blog.quarkslab.com php glpi pinned itemtype

Audit of Allbridge Core Allbridge's maintainers, with s... 2024-3-19 07:0:0 | 阅读: 11 | 收藏 | Quarkslab's blog - blog.quarkslab.com allbridge stellar soroban quarkslab security

Leveraging Sourcetrail to a mapping tool, meet Numbat and Pyrrha Ever wanted to find a nice tool to easily represent cartography re... 2024-3-7 07:0:0 | 阅读: 9 | 收藏 | Quarkslab's blog - blog.quarkslab.com numbat sourcetrail pyrrha database analysis

Leveraging Sourcetrail to a mapping tool, meet Numbat and Pyrrha Ever wanted to find a nice tool to easily represent cartography re... 2024-3-7 07:0:0 | 阅读: 9 | 收藏 | Quarkslab's blog - blog.quarkslab.com numbat sourcetrail pyrrha database python

BGE Attack on AES White-Boxes: Extending Blue Galaxy Energy for Decryption and Shuffled States We announce the release of a ne... 2024-2-29 07:0:0 | 阅读: 11 | 收藏 | Quarkslab's blog - blog.quarkslab.com bge shuffled limitations identify

How I Built a Car In a Box In this article, we'll see how to put an entire car into a transpo... 2024-2-22 07:0:0 | 阅读: 10 | 收藏 | Quarkslab's blog - blog.quarkslab.com ecus ecu vagbox ivi cars

PHP deserialization attacks and a new gadget chain in Laravel Discovery of a new gadget chain in Laravel. IntroductionWithout pretension this article r... 2024-2-13 07:0:0 | 阅读: 14 | 收藏 | Quarkslab's blog - blog.quarkslab.com php username unserialize destruct serialized

DJI - The ART of obfuscation Study of an Android runtime (ART) hijacking mechanism for bytecodeinjection through a step-b... 2024-2-6 07:0:0 | 阅读: 13 | 收藏 | Quarkslab's blog - blog.quarkslab.com analysis packer bytecode w0

PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack. This blog post provides details about nine vulnerabilities affecting the IPv6 network protoco... 2024-1-16 07:0:0 | 阅读: 26 | 收藏 | Quarkslab's blog - blog.quarkslab.com quarkslab tianocore dhcp6 dhcpv6

Blue Galaxy Energy: a new White-box Cryptanalysis Open Source Tool We introduce a new white-box cryptanalysis tool based on the pioneering BGE paper but without... 2023-12-21 07:0:0 | 阅读: 11 | 收藏 | Quarkslab's blog - blog.quarkslab.com bge rounds encodings nosuchcon dfa

Our Pwn2Own journey against time and randomness (part 2) Part 2 of a series about participation in the Pwn2Own Toronto 2023 contest. This blogpost... 2023-11-7 07:0:0 | 阅读: 13 | 收藏 | Quarkslab's blog - blog.quarkslab.com netgear quarkslab firmware itb psirt

Workflow of a zkSync Era transaction: from generation to finalization This blog post presents the entire workflow of a transaction executed on zkSync Era. zkSync E... 2023-10-26 06:0:0 | 阅读: 7 | 收藏 | Quarkslab's blog - blog.quarkslab.com zksync l2 alice era diamond