PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Binbloom blooms: introducing v2

blog.quarkslab.com | research | #reverse-engineering | #firmware | #binary-analysis | #embedded | #tool | #binbloom
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Introducing binbloom v2, Quarkslab's firmware reverse-engineering tool: a new method to determine the load base address of both 32- and 64-bit firmware binaries.
Published
Collected

Related coverage

research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
Quokka: A Fast and Accurate Binary Exporter
Quarkslab open-sources Quokka, a binary exporter that extracts a program's disassembly for offline analysis, letting users write complex analyses without disassembler APIs.
tool · blog.quarkslab.com
From P-Code to GNN: extract binary code semantics
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)
Part one of Project Zero's Over The Air series, turning attention from application processors to Wi-Fi chips and finding flaws in Broadcom's widely used Wi-Fi stack.
research · blog.quarkslab.com
Bypassing Android Hardware Attestation from the Analyst's Chair
Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's chair, from the certificate chain and the attestation extension down to the root of trust, then shows a simple bypass that never touches the secure hardware. We relay the attestation to a clean device and splice a genuine chain back into the target app with a Frida hook. A companion repository ships the validation backend, the demo apps and the instrumentation, so the whole setup can be run and inspected rather than taken on faith.
research · blog.quarkslab.com
Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation
Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
Back