[ Android ]  Android get_user/put_user Exploit https://cxsecurity.com/issue/WLB-2016120148

[ Attack ]  650Gbps DDoS Attack from the Leet Botnet (Not Mirai) https://www.incapsula.com/blog/650gbps-ddos-attack-leet-botnet.html

[ Browser ]  This sec-critical vuln seems to be fixed, double-free in Firefox JavaScript Engine (51) https://gist.github.com/revskills/3e6efaa8bd399a3de0ef99220cd4bde1 bz#1293258

[ Conference ]  Recon Brussels 2017 talks list has been released https://recon.cx/2017/brussels/

[ iOS ]  Slides for my Pegasus Internals talk at #33c3 https://speakerdeck.com/mbazaliy/pegasus-internals

[ Others ]  Kernel 101 – Let’s write a Kernel : http://arjunsreedharan.org/post/82710718100/kernel-101-lets-write-a-kernel ,Part 2 : http://arjunsreedharan.org/post/99370248137/kernel-201-lets-write-a-kernel-with-keyboard cc @ Arjun024

[ Others ]  Guessing this use of COM scriptlets is pentesting. Read @ subTee for more (https://gist.github.com/subTee/24c7d8e1ff0f5602092f58cbb3f7d302) https://t.co/EkUzR7wHvh

[ Others ]  Compiler-Agnostic Function Detection in Binaries https://syssec.mistakenot.net/papers/eurosp-2017.pdf

[ Popular Software ]  Sweet, a first PHPMailer PoC: https://github.com/opsxcq/exploit-CVE-2016-10033

[ Popular Software ]  Arbitrary file deletion vulnerability in Image Slider allows authenticated… https://goo.gl/fb/YPsK2T #FullDisclosure

[ Protocol ]  Multipath TCP : Breaking today's networks with tomorrow's protocol : http://docplayer.net/4350923-Multipath-tcp-breaking-today-s-networks-with-tomorrow-s-protocol.html (Slides)

[ Tools ]  brut3k1t : Brute-force attack that supports multiple protocols and services : https://github.com/ex0dus-0x/brut3k1t

[ Tools ]  Fern Wifi Cracker – Wireless Security Auditing Tool http://www.darknet.org.uk/2016/12/fern-wifi-cracker-wireless-security-auditing-tool/

[ Tools ]  ufgraph - script which parses the output of the uf (un-assemble) command in WinDBG & uses graphviz to generate CFG https://github.com/bfosterjr/ufgraph

[ Windows ]  Cool poc to bypass LFH randomization https://github.com/saaramar/Deterministic_LFH

[ Windows ]  Great summary & examples of Control Flow Guard's current capabilities https://twitter.com/trailofbits/status/813701150365122561

[ WirelessSecurity ]  OpenBTS is not super obvious how to setup. Maybe this post will help someone. https://blog.strcpy.info/2016/11/16/running-openbts-with-the-nuand-bladerf-on-ubuntu-the-definitive-guide/ #BladeRF #HackRF #SDR @ strcpy_