Internship Offers for the 2022-2023 Season The internship season is back at Quarkslab! Our internship topics cover a wide range of our e... 2022-10-17 06:0:0 | 阅读: 40 | 收藏 | blog.quarkslab.com internship assignment protections reverse firmware

Quokka: A Fast and Accurate Binary Exporter Quarkslab is open-sourcing Quokka, a binary exporter to manipulatea program's disassembly wi... 2022-9-22 06:0:0 | 阅读: 17 | 收藏 | blog.quarkslab.com quokka 00s protobuf analysis prog2

Defeating eBPF Uprobe Monitoring This article introduces a kind of eBPF program that may be used to monitor userspace pro... 2022-8-30 06:0:0 | 阅读: 25 | 收藏 | blog.quarkslab.com uprobe uprobes ebpf vma xol

Attacking Titan M with Only One Byte Following our presentation at Black Hat USA, in this blog post we provide some details o... 2022-8-11 06:0:0 | 阅读: 30 | 收藏 | blog.quarkslab.com chip titan memory quarkslab firmware

Secure Messaging Apps and Group Protocols, Part 2 In the first partof the blogpost, we tackled the issue of 1v1 conversations,and it is... 2022-6-16 06:0:0 | 阅读: 64 | 收藏 | blog.quarkslab.com mls leaf encryption security ska

Binbloom blooms: introducing v2 In this blogpost we present our brand new version of binbloom, a toolto find the base a... 2022-5-31 06:0:0 | 阅读: 13 | 收藏 | blog.quarkslab.com firmware binbloom memory candidate titan

Secure Messaging Apps and Group Protocols, Part 1 Today's communications are, as frequently requested by users, more and moresecure. In t... 2022-5-24 06:0:0 | 阅读: 67 | 收藏 | blog.quarkslab.com ratchet security x3dh pfs dhe

Digging Into Runtimes – runc Everyone knows about Docker but not a lot of people are aware of the underlying technolo... 2022-5-10 06:0:0 | 阅读: 20 | 收藏 | blog.quarkslab.com runc lrwxrwxrwx cryptonite mar mars

Commit Level Vulnerability Dataset In this blog post, we present a new vulnerability dataset composed ofthousands of vulne... 2022-4-26 06:0:0 | 阅读: 24 | 收藏 | blog.quarkslab.com security aosp bulletins fixing

A Brief Overview of Auditing XCMv2 Parity Tech mandated Quarkslab to audit XCM version 2 (XCMv2), a cross consensus communicatio... 2022-3-29 06:0:0 | 阅读: 47 | 收藏 | blog.quarkslab.com xcm polkadot executor security pallet

Heap Overflow in OpenBSD's slaacd via Router Advertisement In this blog post we analyze a heap overflow vulnerability we discovered in the IPv6 sta... 2022-3-22 07:0:0 | 阅读: 16 | 收藏 | blog.quarkslab.com dnssl openbsd slaacd ra

Kubernetes and HostPath, a Love-Hate Relationship This article traces the history of three Kubernetes-related vulnerabilities. Explaining... 2022-3-3 07:0:0 | 阅读: 37 | 收藏 | blog.quarkslab.com kubernetes kubelet symlinks 1002101

Smali the Parseltongue Language When analyzing an Android application, we often end up playing withthe Smali intermedia... 2022-2-3 07:0:0 | 阅读: 88 | 收藏 | blog.quarkslab.com 11241 smali 359 apk

Audit of the MimbleWimble Integration Inside Litecoin The Litecoin Foundation mandated Quarkslab to audit the implementation ofthe MimbleWimb... 2022-1-13 07:0:0 | 阅读: 19 | 收藏 | blog.quarkslab.com litecoin mw sidechain coins

Why is Exposing the Docker Socket a Really Bad Idea? It is written almost everywhere: do not expose the Docker socket on Linux! This is follo... 2021-12-14 08:00:00 | 阅读: 22 | 收藏 | blog.quarkslab.com containers alpine processes socat privileged

Status of post-quantum cryptography implementation Post-quantum cryptography is an active field of research, especially since theNIST Call... 2021-12-07 08:00:00 | 阅读: 171 | 收藏 | blog.quarkslab.com security classical qubits primitives draft

Digging into Linux namespaces - part 2 Process isolation is a key component for containers. One of the key underlying mechanism... 2021-11-18 08:00:00 | 阅读: 12 | 收藏 | blog.quarkslab.com cryptonite 65534 processes nogroup alpine

Digging into Linux namespaces - part 1 Process isolation is a key component for containers. One of the key underlying mechanism... 2021-11-16 08:00:00 | 阅读: 25 | 收藏 | blog.quarkslab.com cryptonite netns network processes unshare

Mattermost End-to-End Encryption Plugin This blog post introduces a plugin that provides end-to-end encryption (E2EE) to Matterm... 2021-10-14 07:00:00 | 阅读: 16 | 收藏 | blog.quarkslab.com mattermost gpg encryption backup quarkslab

Internship Offers for the 2021-2022 Season It's time to open Quarkslab internships season! This year, we offer new internships rela... 2021-10-12 07:00:00 | 阅读: 28 | 收藏 | blog.quarkslab.com internship security ebpf quarkslab assignment