[ Firmware ]  Our slides "UEFI Firmware Rootkits: Myths and Reality" with @ vxradius. Revisited and Updated version for #ZeroNights https://github.com/REhints/Publications/blob/master/Conferences/ZeroNights_2016/UEFI_Rootkits_ZN_2016.pdf

[ Hardware ]  Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability https://goo.gl/fb/8ygS5p #FullDisclosure

[ IoTDevice ]  Protecting smart hospitals: A few recommendations - http://bit.ly/2gB6WS3 - @ enisa_eu #EU https://t.co/yOzeFSQJpb

[ Linux ]  Linux ntpd 4.2.8 derive_nonce Stack Overflow https://packetstormsecurity.com/files/139900/ntp-sof.pl.txt

[ Linux ]  Using CHIPSEC with Kali Linux: https://github.com/chipsec/chipsec/wiki/Using-CHIPSEC-with-Kali-Linux

[ Malware ]  A New All-in-One Botnet : Proteus http://blog.fortinet.com/2016/11/28/a-new-all-in-one-botnet-proteus

[ Others ]  Database of a complete X86/X64 instruction set. http://buff.ly/2g4Rmjz

[ Others ]  #osdi Kraken: Live traffic tests to identify & resolve resource utilization bottlenecks in web svcs by @adriancolyer https://t.co/erVPELsYpL

[ Others ]  Oooops.... incorrect fix for my FLIC exploit. So a new post: [0day] [PoC] Incorrect fix for gstreamer FLIC decoder: https://t.co/8XA3xFL4Pt

[ Others ]  Egg Hunter - Twist in Buffer Overflow - BisonWare FTP Server v3.5 http://hacksys.vfreaks.com/research/egg-hunter-twist-in-buffer-overflow-bisonware-ftp-server-v3-5.html vía @ HackSysTeam

[ Others ]  All your Paypal OAuth tokens belong to me - localhost for the win http://blog.intothesymmetry.com/2016/11/all-your-paypal-tokens-belong-to-me.html

[ Others ]  New post by @ 0vercl0k "Token Capture via an Llvm-based Analysis Pass" https://doar-e.github.io/blog/2016/11/27/clang-and-passes/

[ Others ]  Code Integrity on Nano Server: Tips/Gotchas http://www.exploit-monday.com/2016/11/Nano-Server-Code-Integrity.html

[ Protocol ]  Analysis of OpenSSL ChaCha20-Poly1305 Heap Buffer Overflow (CVE-2016-7054) https://blog.fortinet.com/2016/11/23/analysis-of-openssl-chacha20-poly1305-heap-buffer-overflow-cve-2016-7054

[ ReverseEngineering ]  An analysis walkthrough for the latest macros used by #HANCITOR #malware to load shellcode directly into memory: https://t.co/1ahBGSFjZW

[ Tools ]  libfuzzer-workshop - Repository for materials of "Modern fuzzing of C/C++ Projects" workshop. https://github.com/dor1s/libfuzzer-workshop

[ Tools ]  My small tool for converting #PE files dumped from the memory into their raw form: https://github.com/hasherezade/malware_analysis/tree/master/pe_unmapper https://t.co/d1Jv3ulAl5

[ Tools ]  New blog post "Update: xor-kpa.py Version 0.0.4" https://blog.didierstevens.com/2016/11/27/update-xor-kpa-py-version-0-0-4/

[ Tools ]  Another nice tool from Intel use Capstone: SATT to trace & analyze Linux process on Intel Processor Trace hardware. https://t.co/LL82FWsSL6

[ Vulnerability ]  Full exploit of CVE-2016-6754(BadKernel) and slide of @ SyScan360 2016 shanghai <BadKernel: exploit V8 with a typo> https://github.com/secmob/BadKernel

[ Vulnerability ]  Schoolhos CMS v2.29 - userberita SQL injection Vulnerability https://goo.gl/fb/bRvmNm #FullDisclosure