Alexandre Borges

Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215):

https://cyberstan.co.uk/drm-lpe-linux/

#linux #kernel #vulnerability #cybersecurity #exploitation

A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabytes:

https://www.msuiche.com/posts/nanokrnl-cold-boot-fast-boot/

#kernel #infosec #programming #rust #windows #hacking

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503):

https://research.jfrog.com/post/dissecting-and-exploiting-linux-lpe-variant-dirtyclone-cve-2026-43503/

#cve #linux #cybersecurity #informationsecurity #exploitation #vulnerability

Hunting Memory Leaks in bsnmpd with DTrace:

https://oshogbo.com/blog/92/

#dtrace #cybersecurity #informationsecurity #infosec #performance

Malwoverview v8.0 (codename: Revolutions) has been released:

https://github.com/alexandreborges/malwoverview

To install its complete version: pip install malwoverview[all]

Partial List of Improvements:

NEW SERVICE INTEGRATIONS (6):

01. http://URLScan.io — submit URLs, retrieve results, search scans, search by domain/IP (-u/-U)
02. Shodan — IP lookup and search queries (-s/-S, -ip 4)
03. AbuseIPDB — IP reputation checks (-ab/-AB, -ip 5)
04. GreyNoise — IP classification (-gn/-GN, -ip 6)
05. Whois/RDAP — domain and IP lookups (-wh/-WH)
06. LLM threat enrichment — Claude, Gemini, OpenAI, Ollama (--enrich, --llm)

NEW CAPABILITIES (16):

07. Cross-service hash correlation across VT, HA, Triage, AlienVault (--correlate-hash)
08. Batch hash check — Bazaar (-b 11), Hybrid Analysis (-a 16), Triage (-x 8)
09. Directory scan — Bazaar (-b 12), Hybrid Analysis (-a 17), Triage (-x 9)
10. Comprehensive IP lookup across all services (-ip 7)
11. IOC extraction from text, PDF, email, URL (--extract-iocs)
12. YARA rule scanning (--yara, --yara-target)
13. Interactive REPL mode with 22 commands (--interactive)
14. JSON and CSV structured output (--output-format)
15. Result caching with configurable TTL (--no-cache, --cache-ttl)
16. HTTP/HTTPS/SOCKS5 proxy support (--proxy)
17. MITRE ATT&CK technique mapping (--attack-map)
18. Quiet and verbose modes (--quiet, --verbose)
19. HTML/PDF report generation (--report)
20. TUI dashboard mode (--tui)
21. Context-aware LLM prompts — separate threat analysis and CVE analysis prompts
22. LLM provider override from CLI (--llm claude|gemini|openai|ollama)

#threathunting #malware #vulnerability #ai #informationsecurity #cybersecurity #cve

Malwoverview 8.0.1 is available:

https://github.com/alexandreborges/malwoverview

To update it:

python -m pip install -U malwoverview

#threathunting #malware #cve #vulnerability #cybersecurity #informationsecurity #incidentresponse

Redis 8.6: Remote Code Execution via Stream PEL Use After Free:

https://zerotistic.blog/posts/redis-stream-pel-uaf/

#linux #vulnerability #exploitation #informationsecurity #infosec #cybersecurity

Striga: Lifting x86 to LLVM IR with Python:

https://secret.club/2026/05/21/striga.html

#python #reversing #llvm #informationsecurity #infosec #cybersecurity

BitLocker downgrade attacks:

https://archives.pass-the-salt.org/Pass%20the%20SALT/2026/slides/PTS2026-TALK-13-bitlocker_talk_deck.pdf

#windows #bitlocker #infosec #informationsecurity #cybersecurity #crypto

Zombie COTables: Resurrecting Freed Memory to Escape VirtualBox:

https://blog.exodusintel.com/2026/06/15/zombie-cotables-resurrecting-freed-memory-to-escape-virtualbox/

#vulnerability #exploitation #exploit #virtualbox #cybersecurity #infosec #informationsecurity

I am excited to release the extended version of the sixth article in the Exploiting Reversing Series (ERS). Titled "A Deep Dive Into Exploiting a Minifilter Driver (N-day)" this 293-page deep dive offers a comprehensive roadmap for vulnerability exploitation:

https://exploitreversing.com/2026/02/11/exploiting-reversing-er-series-article-06/

Key updates in this extended edition:

[+] Dual Exploit Strategies: Two distinct exploit versions.
[+] Exploit ALPC Write Primitive Edition: elevation of privilege of a regular user to SYSTEM.
[+] Exploit Parent Process ID Spoofing Edition: elevation of privilege of an administrator to SYSTEM.
[+] Solid Reliability: A completely stable and working ALPC write primitive.
[+] Optimized Exploit Logic: Significant refinements to the codebase and technical execution for better stability and predictability.

For those who have read the original release, whose exploit was working, my strong recommendation is that you adopt this extended edition as definitive.

The article guides you through the entire lifecycle of an exploit: from initial reverse engineering and vulnerability analysis to multiple PoC developments and full exploitation.

I hope this serves as a definitive resource for your research. If you find it helpful, please feel free to share it or reach out with your feedback!

Enjoy your reading and have a great day.

#exploit #cve #nday #cybersecurity #informationsecurity #infosec #vulnerability

Malwoverview 8.0.2 has been released:

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

#malware #threathunting #informationsecurity #infosec #vulnerability #cve #dfir

Bypassing SSL Pinning on Play Store AVDs without Frida

https://www.mfumis.com/posts/bypassing-ssl-pinning-on-play-store-avds-without-frida/

#cybersecurity #informationsecurity #frida #mobiledevice #infosec #mobilesecurity #mobile

Authenticated RCE via Argument Injection in Gogs (NOT FIXED):

https://www.rapid7.com/blog/post/ve-authenticated-rce-via-argument-injection-gogs-unfixed/

#cybersecurity #vulnerability #rce #informationsecurity #exploitation

Exploiting Reversing (ER) series: article 07 | Exploitation Techniques | CVE-2024-30085 (part 01)

I am excited to release the seventh article in the Exploiting Reversing Series (ERS). Titled “Exploitation Techniques | CVE-2024-30085 (part 01)” this 119-page technical guide offers a comprehensive roadmap for vulnerability exploitation:

https://exploitreversing.com/2026/03/04/exploiting-reversing-er-series-article-07/

Key features of this edition:

[+] Dual Exploit Strategies: Two distinct exploit versions using Token Stealing and I/O Ring techniques.
[+] Exploit ALPC + PreviousMode Flip + Token Stealing: elevation of privilege of a regular user to SYSTEM.
[+] Exploit ALPC + Pipes + I/O Ring: elevation of privilege of a regular user to SYSTEM.
[+] Solid Reliability: Two complete working and stable exploits, including an improved cleanup stage.
[+] Optimized Exploit Logic: Significant refinements to the codebase and technical execution for better stability and predictability.

The article guides you through the two distinct techniques for exploiting the CVE-2024-30085 Heap Buffer Overflow vulnerability.

I hope this serves as a definitive resource for your research. If you find it helpful, please feel free to share it or reach out with your feedback!

Enjoy your reading and have an excellent day.

#exploit #vulnerability #cve #exploitation #infosec #informationsecurity #windows

I am pleased to announce the publication of the sixth article in the Exploiting Reversing Series (ERS). Titled "A Deep Dive Into Exploiting a Minifilter Driver (N-day)", this 251-page article provides a comprehensive look at a past vulnerability in a mini-filter driver:

https://exploitreversing.com/2026/02/11/exploiting-reversing-er-series-article-06/

It guides readers through the entire investigation process—beginning with binary diffing and moving through reverse engineering, deep analysis and proof-of-concept stages into full exploit development.

I would like to thank Ilfak Guilfanov (@ilfak on X) and Hex-Rays SA (@HexRaysSA@infosec.exchange on X) for their constant and uninterrupted support, which has helped me write these articles over time. 

I hope this serves as a valuable resource for your research. If you enjoy the content, please feel free to share it or reach out with feedback.

Have an excellent day!

#exploit #exploitation #vulnerability #nday #reverseengineering #windows

This presentation remains the go-to reference for learning the inner workings of the IDA Pro Hex-Rays decompiler:

(video) https://www.youtube.com/watch?v=T-YkhNElvng

(article) https://i.blackhat.com/us-18/Thu-August-9/us-18-Guilfanov-Decompiler-Internals-Microcode-wp.pdf

#decompiler #reverseengineer #informationsecurity #cybersecurity

[Cryptodev-linux] Page-level UAF exploitation:

https://nasm.re/posts/cryptodev-linux-vuln

#linux #cybersecurity #informationsecurity #uaf #exploitation #vulnerability

Phantom Grid:

Phantom Grid is an enterprise-grade, kernel-level active defense system that transforms Linux servers into a controlled, deceptive attack surface.

https://github.com/haidang-infosec/phantom-grid

#kernel #linux #honeypot #informationsecurity #cybersecurity #defense #ebpf

Before dropping my next article (ERS_08), I’ve updated the ERS 06 article (rev C.1):

https://exploitreversing.com/2026/02/11/exploiting-reversing-er-series-article-06/

This revision features a refined ALPC exploit with a new stage and an extended cleaner stage, ensuring a stable exit and preventing system crashes.

I’ve also fixed several minor issues and uploaded a new video demonstrating the practical execution.

Enjoy the read and have an excellent day!

#vulnerability #exploitation #cybersecurity #windows #exploit

TP-Link ER605 DDNS Pre-Auth RCE: Chaining CVE-2024-5242, CVE-2024-5243, CVE-2024-5244:

https://oobs.io/posts/er605-1day-exploit/

#exploit #vulnerability #rce #informationsecurity #cybersecurity #infosec

Before Vegas: The “Red Hackers” Who Shaped China’s Cyber Ecosystem:

https://ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/before-vegas-cyberdefense-report.pdf

#cybersecurity #redteam #informationsecurity #threathunting #exploitation #infosec

Dangling pointers, fragile memory – from an undisclosed vulnerability to a Pixel 9 Pro escalation:

https://dawnslab.jd.com/Pixel_9_Pro_EoP/

#android #vulnerability #eop #cybersecurity #infosec #informationsecurity #cve

Blind trust: what is hidden behind the process of creating your PDF file?

https://swarm.ptsecurity.com/blind-trust-what-is-hidden-behind-the-process-of-creating-your-pdf-file/

#vulnerability #cve #exploitation #infosec

MongoBleed explained simply:

https://bigdata.2minutestreaming.com/p/mongobleed-explained-simply

#exploit #exploitation #cve #vulnerability #mongodb #informationsecurity #infosec

CVE-2025-32432: Unauthenticated Remote Code Execution in Craft CMS:

https://www.opswat.com/blog/cve-2025-32432-unauthenticated-remote-code-execution-in-craft-cms

#exploitation #cms #vulnerability #cybersecurity #informationsecurity #cve

Spiteful Fruit - AppleRAID Kernel Heap OOB Write:

https://ret2p.lt/2026/06/30/softraid-spite.html

#cybersecurity #informationsecurity #iOS #apple #vulnerability #informationsecurity #infosec #exploitation

GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095):

https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/

#vulnerability #cybersecurity #informationsecurity #exploitation #cve

The eighth article of the Exploiting Reversing Series (ERS) is now live. Titled “Exploitation Techniques | CVE-2024-30085 (Part 02)” this 91-page technical guide offers a comprehensive roadmap for vulnerability exploitation:

https://exploitreversing.com/2026/03/31/exploiting-reversing-er-series-article-08/

Key features of this edition:

[+] Dual Exploit Strategies: Two distinct exploit versions leveraging the I/O Ring mechanism.
[+] Exploit ALPC + WNF OOB + Pipe Attributes + I/O Ring: elevation of privilege of a regular user to SYSTEM.
[+] Replaced ALPC one-shot write with Pipe Attribute spray for I/O Ring RegBuffers corruption: more reliable adjacency control.
[+] Exploit WNF OOB + I/O Ring Read/Write: elevation of privilege of a regular user to SYSTEM.
[+] Pure I/O Ring primitive: eliminated ALPC dependency entirely. WNF overflow directly corrupts I/O Ring RegBuffers for arbitrary kernel read/write.
[+] Solid Reliability: Two complete, stable exploits, including an improved cleanup stage.

This article guides you through two additional techniques for exploiting the CVE-2024-30085 Heap Buffer Overflow. While demonstrated here, these methods can be adapted as exploitation techniques for many other kernel targets.

I hope this serves as a definitive resource for your research. If you find it helpful, please feel free to share it or reach out with your feedback!

Enjoy the read and have an excellent day.

#exploit #exploitdevelopment #windows #exploitation #vulnerability #minifilterdriver #kernel #heapoverflow #ioring

Another vulnerability in iOS 26.5 with a clear and reproducible crash, registers control, primitive and PoC confirmed, and possibly a working exploit... who knows... ;)

Malwoverview 7.0 has been released:

https://github.com/alexandreborges/malwoverview

This version introduces a new vulnerability-focused approach, and the first feature is NIST support, which allows listing and searching for registered vulnerabilities. In addition, several previous threat detection options have been fixed and improved.

To install Malwoverview:

python -m pip install -U malwoverview

Documentation and examples can be found on the project page.

#vulnerabilities #cve #cybersecurity #informationsecurity #threathunting

TrigonLegacy - Deterministic iOS 7-9 tfp0:

https://therealclarity.github.io/blog/trigon-legacy/

#ios #apple #exploitation #informationsecurity #cybersecurity #vulnerability #reverseengineering

The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets:

[+] ERS 08: https://exploitreversing.com/2026/03/31/exploiting-reversing-er-series-article-08/
[+] ERS 07: https://exploitreversing.com/2026/03/04/exploiting-reversing-er-series-article-07/
[+] ERS 06: https://exploitreversing.com/2026/02/11/exploiting-reversing-er-series-article-06/
[+] ERS 05: https://exploitreversing.com/2025/03/12/exploiting-reversing-er-series-article-05/
[+] ERS 04: https://exploitreversing.com/2025/02/04/exploiting-reversing-er-series-article-04/
[+] ERS 03: https://exploitreversing.com/2025/01/22/exploiting-reversing-er-series-article-03/
[+] ERS 02: https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
[+] ERS 01: https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/

In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors.

I sincerely hope these articles help other professionals define their own steps in this area.

Have a great day and enjoy reading.

#exploit #exploitation #windows #chrome #macOS #iOS #hypervisors #vulnerabilityresearch

CFPsec is program to list Call For Papers or upcoming Hacking/Security Conferences based on cfptime.org website.

https://github.com/alexandreborges/cfpsec

To install it:

python -m pip install -U cfpsec

#cybersecurity #informationsecurity #conferences