#security

7 pages tagged with "security"

infosec

chunkloris: per-chunk http amplification — cross-ecosystem measurement of per-chunk / per-frame cpu cost in production http/1, http/2, http/3, and websocket servers under one-byte-per-chunk request bodies
glaurung windows driver findings — a running catalog of windows kernel-driver bugs found with glaurung, the binary-analysis toolkit — what each bug is, how the tool surfaced it, and an honest read on why microsoft did or did not act on it.
ioctlance: windows driver vulnerability detection — symbolic execution and taint analysis for finding vulnerabilities in windows kernel drivers
network covert channels index — comprehensive catalog of network tunneling and covert channel techniques

security

programming

tokenizing raw executables for malware analysis with bbpe — pretrained huggingface-compatible bpe tokenizers for raw binaries — use them for malware classification, binary similarity, and reverse engineering with transformers