[ Android ]  Likely the last Android Census update, now has 572 devices, SELECT your way to lolworthy bugs. https://census.tsyrklevich.net

[ Android ]  Having fun with secure messengers and Android Wear (and Android Auto) : http://www.slideshare.net/CanSecWest/csw2016-chaykin-havingfunwithsecuremessengersandandroidwear (Slides)

[ Android ]  Checkout @ anarcheuz poc for CVE-2014-0196 - https://github.com/anarcheuz/Android-PoCs/tree/master/CVE-2014-0196

[ Attack ]  Very interesting writeup (spanish) describing how HackingTeam was hacked (opsec tips included): http://pastebin.com/raw/GPSHF04A

[ Browser ]  Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting… http://goo.gl/fb/Gs4QTt #FullDisclosure

[ Crypto ]  Why TLS 1.3 is a major leap forward for #cryptographic protocols. #swsec https://www.cigital.com/blog/tls-1-3/ via @ cigital

[ Exploit ]  Bypassing Different Defense Schemes via Crash-Resistant Probing of Address Space : http://www.slideshare.net/CanSecWest/csw2016-gawlik-bypassingdifferentdefenseschemes (Slides)

[ Exploit ]  Automatic Exploit Generation - an Odyssey : http://www.slideshare.net/CanSecWest/csw2016-d-antoineautomaticexploitgeneration (Slides)

[ Fuzzing ]  afl-utils v1.27a comes with yet another new tool: afl-sync! https://github.com/rc0r/afl-utils Happy syncing! #AmericanFuzzyLop https://t.co/URyF5vohH5

[ Fuzzing ]  "Reducers are Fuzzers" http://blog.regehr.org/archives/1284 by @ johnregehr

[ Fuzzing ]  I just created a Docker image for Nightmare (https://github.com/joxeankoret/nightmare). Just use: $ docker pull joxean/nightmare

[ Hardware ]  HARDSPLOIT : Framework for Hardware Security Audit - a bridge between hardware & a software pentester : http://www.slideshare.net/CanSecWest/csw2016-julien-moinardhardsploit (Slides)

[ IoTDevice ]  Attacking Smart locks w/ a smart Phone : http://www.slideshare.net/CanSecWest/csw2016-song-lismartwars (Slides)

[ Linux ]  KASLR memory randomization proposal for Linux kernel http://permalink.gmane.org/gmane.linux.kernel.hardened.devel/2181

[ MachineLearning ]  Tensorflow - Play with neural networks : https://github.com/tensorflow/playground , Whitepaper : http://download.tensorflow.org/paper/whitepaper2015.pdf

[ MachineLearning ]  Understanding Machine Learning : From Theory to Algorithms : http://www.cs.huji.ac.il/~shais/UnderstandingMachineLearning/understanding-machine-learning-theory-algorithms.pdf (pdf)

[ Malware ]  Neutrino Exploit Kit Analysis and Threat Indicators https://www.sans.org/reading-room/whitepapers/malicious/neutrino-exploit-kit-analysis-threat-indicators-36892

[ Network ]  Today I learned about https://dnshistory.org/ - look up historical DNS records for many, many domain names. Now on #dnsdist :-)

[ NetworkDevice ]  A Systematic Analysis of the Juniper Dual EC Incident : http://eprint.iacr.org/2016/376.pdf (pdf)

[ NetworkDevice ]  Execute My Packet : http://www.slideshare.net/CanSecWest/csw2016-wheeler-barksdalegruskovnjakexecutemypacket (Slides)

[ OpenSourceProject ]  ZDI-16-243: Google Chrome Pdfium JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-243/

[ Others ]  Awesome CPUs : Manuals/documentation & Datasheets for CPU & MCU : https://github.com/larsbrinkhoff/awesome-cpus

[ Others ]  Docker Escape Technology : http://www.slideshare.net/CanSecWest/csw2016-wang-dockerescapetechnology (Slides)

[ Others ]  Here are the slides for @ evan_pena2003 and my talk at @ bsidesnash on Persistence Techniques Seen in the Wild - http://www.slideshare.net/CTruncer/ever-present-persistence-established-footholds-seen-in-the-wild

[ Pentest ]  XSSProxy https://github.com/jackmasa/XSSProxy

[ ReverseEngineering ]  Rockey 4 USB dongle: Unknown algo deduction using black-box input/output pairs & Z3 SMT solver http://blog.yurichev.com/node/71 cc: @ RolfRolles @ seanhn

[ Tools ]  RoP Hooks : http://www.slideshare.net/CanSecWest/csw2016-macaulay-ehtracerophooks (Slides)

[ Tools ]  IPGeoLocation – Retrieve IP Geolocation Information http://www.darknet.org.uk/2016/04/ipgeolocation-retrieve-ip-geolocation-information/

[ Tools ]  Uploaded Symex on github — simple tool which resolves symbols (uses dbghelp): https://github.com/ax330d/Symex

[ Windows ]  New post up on @ WhitehattersA exploiting a bunch more of the @ HackSysTeam driver vulns https://www.whitehatters.academy/intro-to-windows-kernel-exploitation-more-of-the-hacksys-driver/

[ Windows ]  Bypassing application whitelisting in critical infrastructures : http://www.slideshare.net/CanSecWest/csw2016-freingruber-bypassingapplicationwhitelisting (Slides)

[ Windows ]  OK! The win10 linux files are at ...\AppData\Local\lxss\rootfs\ Defender excludes rootfs from active protection. https://t.co/wditNRkOBg

[ Windows ]  Masquerading as a Windows System Binary Using Digital Signatures : https://labs.mwrinfosecurity.com/blog/masquerading-as-a-windows-system-binary-using-digital-signatures/ https://t.co/8hxI8LqYaU