Reverse Engineering Coin Hunt World’s Binary Protocol IntroductionWe are going to walk through the process we took to reverse... 2023-5-31 09:0:0 | 阅读: 9 | 收藏 | NCC Group Research - research.nccgroup.com headerbyte sfsdatatype fsm sfsobject

Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353) Faronics Insight is a feature rich software platform which is deployed... 2023-5-30 09:0:0 | 阅读: 42 | 收藏 | NCC Group Research - research.nccgroup.com teacher faronics consoles insight attacker

Tool Release: Code Query (cq) Code Query is a new, open source universal code security scanning tool.... 2023-5-26 23:14:16 | 阅读: 14 | 收藏 | NCC Group Research - research.nccgroup.com security cq slides

CowCloud A common challenge technical teams (e.g. penetration testers) face is centr... 2023-5-26 01:28:41 | 阅读: 9 | 收藏 | NCC Group Research - research.nccgroup.com cowcloud ec2 ami nessus repository

OffensiveCon 2023 – Exploit Engineering – Attacking the Linux Kernel Cedric Halbronn and Alex Plaskett presented at OffensiveCon on the 19th of... 2023-5-23 20:17:6 | 阅读: 11 | 收藏 | NCC Group Research - research.nccgroup.com paillier libslub rigorous analysis

Tool Release: Code Credential Scanner (ccs) Code Credential Scanner is a new open source tool designed to detect hardco... 2023-5-23 19:0:0 | 阅读: 1 | 收藏 | NCC Group Research - research.nccgroup.com leaky 2y cloud php github

Exploring Overfitting Risks in Large Language Models In the following blog post, we explore how overfitting can affect Large Lan... 2023-5-23 05:16:16 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com copyrighted 2560 overfitting scores

The Paillier Cryptosystem with Applications to Threshold ECDSA You may have heard of RSA (b. 1977), but have you heard of its cousin, Pail... 2023-5-19 22:41:55 | 阅读: 10 | 收藏 | NCC Group Research - research.nccgroup.com paillier encryption modulo ecdsa ciphertext

Rigging the Vote: Uniqueness in Verifiable Random Functions This blog post presents a whirlwind overview of Verifiable Random Funct... 2023-5-18 19:0:0 | 阅读: 9 | 收藏 | NCC Group Research - research.nccgroup.com gamma vrf calculate voting committee

Medical Devices: A Hardware Security Perspective Medical device security is gaining more attention for several reasons. The c... 2023-5-18 01:48:47 | 阅读: 6 | 收藏 | NCC Group Research - research.nccgroup.com security patient software threats development

NETGEAR Routers: A Playground for Hackers? SummaryAdvisoriesVulnerabilitiesTelnetPSV-2023-0008– Telnet Default... 2023-5-15 17:13:36 | 阅读: 16 | 收藏 | NCC Group Research - research.nccgroup.com payload netgear 2048 overflow soapaction

Real World Cryptography Conference 2023 – Part I The annual Real World Cryptography Conference organized by the IACR recentl... 2023-5-11 04:36:53 | 阅读: 13 | 收藏 | NCC Group Research - research.nccgroup.com encryption commitment security ciphertext pqc

Public Report – AWS Nitro System API & Security Claims In the last calendar quarter of 2022, Amazon Web Services (AWS) engaged NCC... 2023-5-4 07:28:33 | 阅读: 9 | 收藏 | NCC Group Research - research.nccgroup.com rebinding llm pwn2own machine nitro

State of DNS Rebinding in 2023 Different forms of DNS rebinding attacks have been described as far back as... 2023-4-27 09:1:0 | 阅读: 2 | 收藏 | NCC Group Research - research.nccgroup.com network rebinding chrome singularity bypass

Machine Learning 103: Exploring LLM Code Generation This executable blog post is the third in a series related to machine l... 2023-4-25 09:1:0 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com security solana kubernetes zk pwn2own

HITBAMS – Your Not so “Home” Office – Soho Hacking at Pwn2Own Alex Plaskett and McCaulay Hudson presented this talk at HITB AMS on the 20t... 2023-4-24 16:31:1 | 阅读: 5 | 收藏 | NCC Group Research - research.nccgroup.com security netgear synology chains

Public Report – AWS Nitro System API & Security Claims In the last calendar quarter of 2022, Amazon Web Services (AWS) engaged NCC... 2023-4-20 14:0:0 | 阅读: 34 | 收藏 | NCC Group Research - research.nccgroup.com security cloud kubernetes solana nitro

Public Report – Kubernetes 1.24 Security Audit NCC Group was selected to perform a security evaluation of Kubernetes 1.24.... 2023-4-17 13:1:13 | 阅读: 3 | 收藏 | NCC Group Research - research.nccgroup.com security kubernetes solana pedersen

Public Report – Solana Program Library ZK-Token Security Assessment In August 2022, Solana Foundation engaged NCC Group to conduct a security as... 2023-4-14 00:0:16 | 阅读: 3 | 收藏 | NCC Group Research - research.nccgroup.com security kubernetes amounts

Stepping Insyde System Management Mode In October of 2022, Intel’s Alder Lake BIOS source code was leaked online.... 2023-4-11 21:5:38 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com smm smi smram efi memory