[ Android ]  Android malware roots devices, installs Tor/a proxy app to steal data; spotted in attacks - http://duo.sc/AndroidBot https://t.co/7WcPF1RiDr

[ Android ]  My write-up on the new Network Security Policy configuration options that Android apps will soon be able to use: https://koz.io/network-security-policy-configuration-for-android-apps/

[ Attack ]  The Latest Intelligence for January 2016 sees a rise in fake offer #SocialMedia #scams http://symc.ly/20XyDVK https://t.co/W1PsM10Mbn

[ Detect ]  Hunting through RDP Data : https://speakerdeck.com/jshlbrd/hunting-through-rdp-data cc: @ jshlbrd (Slides)

[ Exploit ]  Introduction to Windows Shellcode Development (Part 3): http://securitycafe.ro/2016/02/15/introduction-to-windows-shellcode-development-part-3/ ,Part 2: http://securitycafe.ro/2015/12/14/introduction-to-windows-shellcode-development-part-2/ ,1: http://securitycafe.ro/2015/10/30/introduction-to-windows-shellcode-development-part1/

[ Fuzzing ]  Some new hot tricks (research area) on Symbolic Execution - Counting Path Constraint solucions - Tha paper here: http://www.iste.uni-stuttgart.de/fileadmin/user_upload/iste/zss/publications/supplementaryMaterial/2014-FSE-IncludingErrata.pdf

[ Hardware ]  Video of "Hacking the Wireless World: #sdr Exploits" from #shmoocon 2016 is online: https://archive.org/details/Hacking_The_Wireless_World Slides: http://spench.net/drupal/files/Balint_Seeber-ShmooCon_2016.pdf

[ iOS ]  iOS (up to) 9.3b3 IOHIDFamily Use-After-Free (incorrect patch for CVE-2015-6974) https://ghostbin.com/paste/s3tz7

[ Malware ]  Malware samples zoo (source and binaries): https://github.com/ytisf/theZoo.git #reverseengineering #dfir

[ Malware ]  Decrypter for HydraCrypt and UmbreCrypt available http://blog.emsisoft.com/2016/02/12/decrypter-for-hydracrypt-and-umbrecrypt-available/

[ Malware ]  PadCrypt: The first ransomware with Live Support Chat and an Uninstaller http://www.bleepingcomputer.com/news/security/padcrypt-the-first-ransomware-with-live-support-chat-and-an-uninstaller/

[ Others ]  How To Write An LLVM Register Allocator : https://github.com/nael8r/How-To-Write-An-LLVM-Register-Allocator/blob/master/HowToWriteAnLLVMRegisterAllocator.rst

[ Others ]  The dark side of Big Data. https://www.martinruenz.de/article/data-privacy/2016/02/14/the-dark-side-of-big-data.html

[ Others ]  Machine learning explained in interactive visualizations (part 1) http://www.r2d3.us/visual-intro-to-machine-learning-part-1/ #d3js #machinelearning

[ Popular Software ]  .@ VMware reissues incomplete vCenter Server patch for a RCE flaw - http://ow.ly/YlJox

[ Popular Software ]  Serialization Must Die, Part 1: Attacking Kryo https://www.contrastsecurity.com/security-influencers/serialization-must-die-act-1-kryo

[ Popular Software ]  Finally finished my writeup on PHP Mem-read via gdImageRotate. POC attached: http://www.libnex.org/blog/exploitingcve-2016-1903memoryreadviagdimagerotateinterpolated

[ ReverseEngineering ]  Reverse engineering ARM1 instruction sequencing, compared with the Z-80 and 6502 http://www.righto.com/2016/02/reverse-engineering-arm1-instruction.html

[ Rootkit ]  Rootkit basics ---> DKOM http://bsodtutorials.blogspot.ca/2014/01/rootkits-direct-kernel-object.html A bit out of date though...

[ SecurityProduct ]  FireEye Detection Evasion and Whitelisting of Arbitrary Malware: https://labs.bluefrostsecurity.de/advisories/bfs-sa-2016-001/

[ ThirdParty ]  A detailed write-up of WebKit's new B3 JIT, which replaces LLVM as the low-level optimiser for the FTL JIT https://webkit.org/blog/5852/introducing-the-b3-jit-compiler/

[ Tools ]  Patching ROP-encoded shellcodes into PEs https://github.com/gpoulios/ROPInjector

[ Tools ]  Dynamic analysis of a Windows shellcode using Miasm http://www.miasm.re/blog/2016/02/12/dynamic_shellcode_analysis.html

[ Tools ]  SSL Stripping and HSTS Bypass with BetterCap https://www.bettercap.org/blog/sslstripping-and-hsts-bypass/#.VsHQflQ9TwA.twitter https://t.co/aCSrbzBfLy

[ Tools ]  Search for security advisories, CVEs, exploits, #nessus scripts, hack forums, bug bounty programs, and more with http://vulners.com

[ Tools ]  Introducing LECmd - a lnk processing tool that supports all available structures, json and csv support : http://binaryforay.blogspot.in/2016/02/introducing-lecmd.html

[ Windows ]  Just uploaded an EoP (SYSTEM) exploit for my CVE-2016-0051 (MS16-016): https://github.com/koczkatamas/CVE-2016-0051 https://t.co/DVJLCrUVDe