PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Reverse-engineering Broadcom wireless chipsets

blog.quarkslab.com | research | #fuzzing | #reverse-engineering | #firmware | #vulnerability | #wifi | #broadcom
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An internship account of obtaining, reversing and fuzzing Broadcom Wi-Fi firmware (bcm43xx chips used in many phones and laptops), including several newly found vulnerabilities.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Automatic post-fuzzing triage and automation using esReven
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
blog · projectzero.google
Over The Air - Vol. 2, Pt. 2: Exploiting The Wi-Fi Stack on Apple Devices
Part two of Project Zero's Over The Air Vol. 2 series, focusing on the firmware running on Broadcom's Wi-Fi SoC in the iPhone 7 as a step toward over-the-air exploitation.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Part two of Project Zero's Over The Air research, escalating from code execution on Broadcom's Wi-Fi SoC to remote kernel code execution on the host.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)
Part one of Project Zero's Over The Air series, turning attention from application processors to Wi-Fi chips and finding flaws in Broadcom's widely used Wi-Fi stack.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
Back