PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Deep Dive Into Samsung's TrustZone (Part 2)

blog.quarkslab.com | research | #reverse-engineering | #ghidra | #tooling | #tee | #samsung | #trustzone
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part two of the Samsung TrustZone series introduces the toolset built for the research: Ghidra/IDA loaders for MCLF and SBOOT, a trustlet communication framework, an AFL/Unicorn fuzzer and more.
Published
Collected

Related coverage

research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 3)
Part three of the Samsung TrustZone series: the vulnerabilities found in Secure World components (Kinibi trustlets) and how they were exploited to reach code execution in EL3 on Galaxy devices.
research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 1)
Part one of a three-part series touring Samsung's TrustZone implementation (with Trustonic/Kinibi): its components, how they interact, and the TEE security model on Galaxy S6-S9 devices.
research · blog.quarkslab.com
Attacking the ARM's TrustZone
Second TrustZone post: a technical view of the attack surface — monitor message handlers, trustlets and Secure Boot — and what code execution at each privilege level enables.
research · blog.quarkslab.com
Introduction to Trusted Execution Environment: ARM's TrustZone
First of two posts on hardware TEEs: introduces Trusted Execution Environments, then ARM TrustZone — Secure and Non-Secure worlds, monitor mode, and trustlet-based trusted applications.
research · blog.quarkslab.com
Reverse Engineering Samsung S6 SBOOT - Part II
Part two of the Samsung S6 SBOOT reverse engineering series: two techniques for locating Trustonic's TEE (t-base) inside the proprietary bootloader blob, continuing the path toward the TEE OS.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
Back