PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pentester spotlight: Alx

bugcrowd.com | blog | #bug-bounty | #hardware-security | #mobile-security | #memory-corruption | #career | #pentester-spotlight
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Alx, a hardware and mobile security specialist, traces his path from C64 cracking demos and Bugtraq CVEs to freelance bug hunting, urging more attention to memory corruption and binary attack vectors.
Published
Collected

Related coverage

blog · bugcrowd.com
Pentester spotlight: Nitesh Bhatter
From a cryptography project in India to a Johns Hopkins double master's, Nitesh Bhatter made his name in mobile security, spotting hardcoded API keys and client-side checks servers never enforced.
blog · bughunters.google.com
CVR: The Mines of Kakadûm
Google's CVR team details memory corruption bugs in the Kakadu JPEG 2000 image library and shows how 'Conditional Corruption' overcomes environment constraints to achieve remote code execution.
blog · bughunters.google.com
Chrome VRP Reward Updates to Incentivize Deeper Research
Chrome VRP restructures rewards with tiered payouts for memory corruption bugs - baseline, high-quality report, controlled write, and demonstrated RCE - to incentivize deeper vulnerability research.
blog · blog.trailofbits.com
Uncovering memory corruption in NVIDIA Triton (as a new hire)
In my first month at Trail of Bits as an AI/ML security engineer, I found two remotely accessible memory corruption bugs in NVIDIA's Triton Inference Server during a routine onboarding practice.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · blog.trailofbits.com
Continuously fuzzing Python C extensions
Trail of Bits demonstrates fuzzing Python C extensions with Google's Atheris, integrating the cbor2 library into OSS-Fuzz with CIFuzz for continuous fuzzing and uncovering memory corruption bugs.
Back