Some feedback from the HITB 2012 conference
Recently, HITB 2012 took place in Amsterdam (Okura Hotel) and some of us attended.Impressed by the quality of the conference, we will try to summarize here all presentations that we attended.Also,...
View ArticleClik here to view.
HTC unlock internals
Since the end of 2011, HTC allows unlocking its Smartphones' bootloaders. Before that, HTC controlled every updates and packages that were installed on their devices. Users can now unlock their device...
View ArticleSome feedback from the 28C3 conference
Here is a summary of the talks I attended during CCC. The talks were given in 3 simultaneous tracks, so some choices had to be made. All in all, this is one of the best conferences I attended and I can...
View ArticleRetours sur le 28C3
Voilà un résumé des conférences auxquelles j'ai assisté. Les planches seront rendues disponibles au fur et à mesure. Les conférences sont réparties sur 3 salles en simultané, il a donc fallu faire des...
View ArticleiOS 5 data protection updates
iOS 5 was released this week, and introduced some changes to the data protection features we described at HITB Amsterdam. This post highlights the updates made since iOS 4.LwVM partition schemeThe GPT...
View ArticleHack.lu CTF 2011 Write-up : Scotty's last signal
Another writeup for the excellent Hack.lu 2011 Capture The Flag contest. This one was very unusual, based on a patched NES rom of Super Mario Bros 1. Scotty's last signal You might have heard about...
View ArticleHack.lu CTF 2011 Write-up : FluxScience
This was probably one of the most entertaining challenges of this CTF.A file data.flux is provided. The goal is to analyze a Windows binary to be ableto decrypt this file.A few informations are given:...
View ArticleClik here to view.
Hack.lu CTF 2011 Write-up : Romulan Business Network
Once again, we participated in the Capture-The-Flag event organized by the FluxFingers team at Hack.lu. Just like last year's CTF, the challenges were fun and original, and we finished up first after...
View ArticleThe undocumented password validation algorithm of Adobe Reader X
Someone recently sent me an email about troubles when opening in Origami encrypted PDF documents produced by Acrobat Pro X. At first I thought it was a bug, but while looking in the data of the...
View ArticleRushing Recon 2011!!!
Hi everyone,In the beginning of July, several people from our lab were in Montreal for the Recon conference, where we gave four talks. We really enjoyed our time there. The panel of talks was, once...
View ArticleAnalysis of the jailbreakme v3 font exploit
Two weeks ago, comex released the third version of jailbreakme. Two exploits are used to jailbreak Apple devices by opening a PDF file in the MobileSafari browser: initial code execution is obtained...
View ArticleLinux syscall ABI
A quick post to summarize the linux kernel syscall ABI on i386 architecture.It is hard to come by a short summary of how to do direct syscalls under the linux kernel. This does not intend to be...
View ArticleClik here to view.
Origami 1.0 released!
I am pleased to announce the first stable release of Origami, the PDF manipulation framework! A lot of new cool features has been added since the last beta and I consider the framework has become...
View ArticleClik here to view.
Passcode bypass of the HTC Desire Z using an unexpected feature of the...
Android devices are becoming increasingly present everywhere. iPhone security has been analyzed by researchers -- however this is more difficult for Android devices due to the diversity of vendors and...
View ArticleSniffing USB traffic with VMWare
VMWare offers the possibility to dump any usb traffic at the lowest level to a dump file.We'll describe here how to activate this feature, and additionally publish a script to convert the dump file to...
View ArticleClik here to view.
x64 spoon
While coding and debugging some low-level stuff I sometime need to write a little piece of assembly code to see if i'm right. Until now, I was writing code into a process debugged with OllyDbg, and...
View ArticleSplitting a mercurial repository : HgSplit
Here at the R&D lab we use mercurial for our code versionning.One of the problems we faced was that sometimes we would commit big files like pdfs or raw data into a repository.This is fine, as long...
View ArticleTraining at CanSecWest 2011: Advanced binary deobfuscation
Yoann 'jj' Guillot will also be giving a course about advanced binary deobfuscation, during the next CanSecWest Dojo session in Vancouver (March 7th/8th).The course will teach you how to overcome...
View ArticleClik here to view.
IIS Backdoor
In this article I will explain how I designed a rootkit for Microsoft Internet Information Services (IIS).The question is: why a backdoor in a web server?First obvious but useless answer: because we...
View ArticleTraining at CanSecWest 2011 : Analysis of malicious documents
Jean-Baptiste and Guillaume will give a course about malicious document analysis during the next CanSecWest Dojo session at Vancouver (March 7th/8th).The course deals with two major cases: PDF and...
View Article
