Канал: gamozolabs

Writing a Linux debugger

Writing a Linux debugger

Benchmarking mmap() scaling on Linux threads

Benchmarking mmap() scaling on Linux threads

Trying to reverse engineer Tibia damage formulas from a server

Trying to reverse engineer Tibia damage formulas from a server

Fast image searching for monochrome sub-images

Fast image searching for monochrome sub-images

Monarch 10EE Tailstock Rebuilding | Video fixed this time!

Monarch 10EE Tailstock Rebuilding | Video fixed this time!

Monarch 10EE Tailstock Rebuilding | Video fixed this time!

Monarch 10EE Tailstock Rebuilding | Video fixed this time!

Attempting to write a B-tree for extremely low-latency core-to-core communications

Attempting to write a B-tree for extremely low-latency core-to-core communications

Atomic data structure dev, custom Linux /sbin/init (Part 2/2)

Atomic data structure dev, custom Linux /sbin/init (Part 2/2)

Atomic data structure dev, custom Linux /sbin/init (Part 1/2)

Atomic data structure dev, custom Linux /sbin/init (Part 1/2)

Cursed lifetimes in Rust

Cursed lifetimes in Rust

Writing and benchmarking a high-performance atomic queue

Writing and benchmarking a high-performance atomic queue

Lemonade: Starting a debugger in Rust

Lemonade: Starting a debugger in Rust

AoC 2022 Day 6 - Attempt with AVX-512 (Part 2)

AoC 2022 Day 6 - Attempt with AVX-512 (Part 2)

AoC 2022 Day 6 - Attempt with AVX-512 (Part 1)

AoC 2022 Day 6 - Attempt with AVX-512 (Part 1)

Benchmarking memory accesses from each core

Benchmarking memory accesses from each core

Ranting + Terraria + High Performance Symbolized Stack tracing

Ranting + Terraria + High Performance Symbolized Stack tracing

Atomic Page Tables

Atomic Page Tables

Profiling mp4, trying to figure out why encoders are so slow

Profiling mp4, trying to figure out why encoders are so slow

Writing a DWM status bar

Writing a DWM status bar

Allocado: Misc features + More generics for more perf (Part 2)

Allocado: Misc features + More generics for more perf (Part 2)

Allocado: Misc features + More generics for more perf (Part 1)

Allocado: Misc features + More generics for more perf (Part 1)

Allocado: Implementing Globalize

Allocado: Implementing Globalize

Cannoli: Debugging a TLS bug

Cannoli: Debugging a TLS bug

Allocado: Adding support for TypeId on non-'static types

Allocado: Adding support for TypeId on non-'static types

Cannoli: Adding mmap()/munmap() support

Cannoli: Adding mmap()/munmap() support

High-performance QEMU Instruction and Memory Access Tracing

High-performance QEMU Instruction and Memory Access Tracing

Oscilloscope Hacking: Rigol DS1052E (Part 2 of 2)

Oscilloscope Hacking: Rigol DS1052E (Part 2 of 2)

Oscilloscope Hacking: Rigol DS1052E (Part 1 of 2)

Oscilloscope Hacking: Rigol DS1052E (Part 1 of 2)

Gentoo on 192 cores!!

Gentoo on 192 cores!!

Causing NT 4.0 MIPS to bluescreen without even trying

Causing NT 4.0 MIPS to bluescreen without even trying

Adding memory management and threading to our Rust on Windows NT MIPS

Adding memory management and threading to our Rust on Windows NT MIPS

Becoming #1 WoW Classic Horde healer in the world by optimization and programming

Becoming #1 WoW Classic Horde healer in the world by optimization and programming

Getting Rust running on Windows NT 4.0 MIPS64

Getting Rust running on Windows NT 4.0 MIPS64

Cuddly Kangaroo: A static website generator in Rust

Cuddly Kangaroo: A static website generator in Rust

mILkshake: Algebraic simplifications

mILkshake: Algebraic simplifications

mILkshake: DCE and basic operation simplification

mILkshake: DCE and basic operation simplification

mILkshake: Uhhh, we rewrote our IL

mILkshake: Uhhh, we rewrote our IL

vanillascoop: Graphing + Register Propagation

vanillascoop: Graphing + Register Propagation

vanillascoop: Optimization Passes (DCE and Constant Propagation)

vanillascoop: Optimization Passes (DCE and Constant Propagation)

vanillascoop: A new IL

vanillascoop: A new IL

Writing Advanced Maplestory Cheats

Writing Advanced Maplestory Cheats

FuzzOS: Getting multiple cores booted (Part 2/2)

FuzzOS: Getting multiple cores booted (Part 2/2)

FuzzOS: Getting multiple cores booted (Part 1/2)

FuzzOS: Getting multiple cores booted (Part 1/2)

FuzzOS: Writing an ACPI SPCR parser + serial driver

FuzzOS: Writing an ACPI SPCR parser + serial driver

Hacking a Printer: Day 5, part 2, Writing an injectable GDB stub

Hacking a Printer: Day 5, part 2, Writing an injectable GDB stub

Hacking a Printer: Day 5, part 1, Writing shellcode in Rust

Hacking a Printer: Day 5, part 1, Writing shellcode in Rust

Hacking a Printer: Day 4, part 2, Uhhh... waiting for Ghidra

Hacking a Printer: Day 4, part 2, Uhhh... waiting for Ghidra

Hacking a Printer Day 4, part 1: Rant + Finding a place to inject code

Hacking a Printer Day 4, part 1: Rant + Finding a place to inject code

Hacking a Printer: Day 3, part 2, modifying the firmware

Hacking a Printer: Day 3, part 2, modifying the firmware

Hacking a Printer: Day 3 part 1, making externally accessible flash

Hacking a Printer: Day 3 part 1, making externally accessible flash

Hacking a Printer: Day 2, just looking through the firmware

Hacking a Printer: Day 2, just looking through the firmware

Hacking a Printer: Day 1, Picking a printer, dumping the firmware

Hacking a Printer: Day 1, Picking a printer, dumping the firmware

Binary Heaps: Part 2

Binary Heaps: Part 2

Binary Heaps: Part 1

Binary Heaps: Part 1

Fuzzing: Corpus Minimization

Fuzzing: Corpus Minimization

WoW Classic Healer Theorycrafting: Parsing Logs (Part 2/2)

WoW Classic Healer Theorycrafting: Parsing Logs (Part 2/2)

WoW Classic Healer Theorycrafting: Parsing Logs (Part 1/2)

WoW Classic Healer Theorycrafting: Parsing Logs (Part 1/2)

FuzzOS: Getting the OS running on ARM64 hardware (Part 2/2)

FuzzOS: Getting the OS running on ARM64 hardware (Part 2/2)

FuzzOS: Getting the OS running on ARM64 hardware (Part 1/2)

FuzzOS: Getting the OS running on ARM64 hardware (Part 1/2)

FuzzOS: Day 1, starting the OS

FuzzOS: Day 1, starting the OS

Decompressing all of en-Wikipedia in 30 seconds

Decompressing all of en-Wikipedia in 30 seconds

Offline Wikipedia Browser - Playing around with the raw data

Offline Wikipedia Browser - Playing around with the raw data

Trying to figure out how we want to fuzz with QEMU

Trying to figure out how we want to fuzz with QEMU

Rewriting our Android exploit to be more reliable

Rewriting our Android exploit to be more reliable

Paper Review: Nyx

Paper Review: Nyx

Getting our Android exploit snapshot running in QEMU (Part 2/2)

Getting our Android exploit snapshot running in QEMU (Part 2/2)

Getting our Android exploit snapshot running in QEMU (Part 1/2)

Getting our Android exploit snapshot running in QEMU (Part 1/2)

Reading kernel page tables with our Android exploit

Reading kernel page tables with our Android exploit

Dumping register and physical memory state with our Android exploit

Dumping register and physical memory state with our Android exploit

Explaining the exploit we wrote and rants

Explaining the exploit we wrote and rants

Finding and exploiting a bug (LPE) in an old Android phone (Part 2/2)

Finding and exploiting a bug (LPE) in an old Android phone (Part 2/2)

Finding and exploiting a bug (LPE) in an old Android phone (Part 1/2)

Finding and exploiting a bug (LPE) in an old Android phone (Part 1/2)

Adding mutations to our ASN.1 library

Adding mutations to our ASN.1 library

Making an ASN.1 Deserializer and Serializer

Making an ASN.1 Deserializer and Serializer

Starting a basic X.509 fuzzer

Starting a basic X.509 fuzzer

Advanced Fuzzing: Input Tracking

Advanced Fuzzing: Input Tracking

Advanced Fuzzing: Compare shattering

Advanced Fuzzing: Compare shattering

Fuzz Week Day ?: The Corpus

Fuzz Week Day ?: The Corpus

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 3/3)

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 3/3)

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 2/3)

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 2/3)

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 1/3)

Fuzz Week Day 5: C JIT and Using the Fuzzer (Part 1/3)

Fuzz Week Day 3/4: RISC-V JIT for Extra Perf (Part 2/2)

Fuzz Week Day 3/4: RISC-V JIT for Extra Perf (Part 2/2)

Fuzz Week Day 3/4: RISC-V JIT for Extra Perf (Part 1/2)

Fuzz Week Day 3/4: RISC-V JIT for Extra Perf (Part 1/2)

Fuzz Week Day 2: RISC-V Emulator for scalable and instrumentable fuzzing

Fuzz Week Day 2: RISC-V Emulator for scalable and instrumentable fuzzing

Fuzz Week Day 1: An Intro

Fuzz Week Day 1: An Intro

Chocolate Milk: The beginnings of booting Windows

Chocolate Milk: The beginnings of booting Windows

Paper Review: BaseSAFE: Baseband SAnitized Fuzzing through Emulation

Paper Review: BaseSAFE: Baseband SAnitized Fuzzing through Emulation

Chocolate Milk: 8 4 GiB Windows VMs, 50 MiB memory use

Chocolate Milk: 8 4 GiB Windows VMs, 50 MiB memory use

Chocolate Milk: TCP Stack (Part 2/2, 2020/05/06)

Chocolate Milk: TCP Stack (Part 2/2, 2020/05/06)

Chocolate Milk: TCP Stack (Part 1/2, 2020/05/06)

Chocolate Milk: TCP Stack (Part 1/2, 2020/05/06)

Chocolate Milk: Network Databasing (Part 2/2, 2020/04/29)

Chocolate Milk: Network Databasing (Part 2/2, 2020/04/29)

Chocolate Milk: Network Databasing (Part 1/2, 2020/04/29)

Chocolate Milk: Network Databasing (Part 1/2, 2020/04/29)

Chocolate Milk: System Hypervisor (Part 2/2, 2020/05/01)

Chocolate Milk: System Hypervisor (Part 2/2, 2020/05/01)

Chocolate Milk: System Hypervisor (Part 1/2, 2020/05/01)

Chocolate Milk: System Hypervisor (Part 1/2, 2020/05/01)

Chocolate Milk: Transplanting a Windows application (Part 2/2, 2020/04/25)

Chocolate Milk: Transplanting a Windows application (Part 2/2, 2020/04/25)

Chocolate Milk: Transplanting a Windows application (Part 1/2, 2020/04/25)

Chocolate Milk: Transplanting a Windows application (Part 1/2, 2020/04/25)

Chocolate Milk: Intel VT-x Hypervisor (Part 2/2, 2020/04/24)

Chocolate Milk: Intel VT-x Hypervisor (Part 2/2, 2020/04/24)

Chocolate Milk: Intel VT-x Hypervisor (Part 1/2, 2020/04/24)

Chocolate Milk: Intel VT-x Hypervisor (Part 1/2, 2020/04/24)

Chocolate Milk: Network mapped memory (2020/04/23)

Chocolate Milk: Network mapped memory (2020/04/23)

Chocolate Milk: Copyless UDP stack (Part 2/2, 2020/04/19)

Chocolate Milk: Copyless UDP stack (Part 2/2, 2020/04/19)

Chocolate Milk: Copyless UDP stack (Part 1/2, 2020/04/19)

Chocolate Milk: Copyless UDP stack (Part 1/2, 2020/04/19)

Chocolate Milk: E1000 NIC driver (2020/04/18)

Chocolate Milk: E1000 NIC driver (2020/04/18)

Chocolate Milk: Interrupt Draining (2020/04/17)

Chocolate Milk: Interrupt Draining (2020/04/17)

Chocolate Milk: ACPI and NUMA (Part 2/2, 2020/04/16)

Chocolate Milk: ACPI and NUMA (Part 2/2, 2020/04/16)

Chocolate Milk: ACPI and NUMA (Part 1/2, 2020/04/16)

Chocolate Milk: ACPI and NUMA (Part 1/2, 2020/04/16)

Chocolate Milk: Soft Reboot (Part 2/2, 2020/04/14)

Chocolate Milk: Soft Reboot (Part 2/2, 2020/04/14)

Chocolate Milk: Soft Reboot (Part 1/2, 2020/04/14)

Chocolate Milk: Soft Reboot (Part 1/2, 2020/04/14)

Chocolate Milk: Early Kernel (Part 2/2, 2020/04/11)

Chocolate Milk: Early Kernel (Part 2/2, 2020/04/11)

Chocolate Milk: Early Kernel (Part 1/2, 2020/04/11)

Chocolate Milk: Early Kernel (Part 1/2, 2020/04/11)

Chocolate Milk: Virtual Memory Manager (Part 2/2, 2020/04/12)

Chocolate Milk: Virtual Memory Manager (Part 2/2, 2020/04/12)

Chocolate Milk: Virtual Memory Manager (Part 1/2, 2020/04/12)

Chocolate Milk: Virtual Memory Manager (Part 1/2, 2020/04/12)

Chocolate Milk: The Bootloader Basics (Part 1/2, 2020/04/10)

Chocolate Milk: The Bootloader Basics (Part 1/2, 2020/04/10)

Chocolate Milk: The Bootloader Basics (Part 2/2, 2020/04/10)

Chocolate Milk: The Bootloader Basics (Part 2/2, 2020/04/10)

Generating random servers to find the most cost effective server

Generating random servers to find the most cost effective server

Fuzz Theory: AVX-512 fuzzing analogue

Fuzz Theory: AVX-512 fuzzing analogue

Benchmarking RISC-V IL, implementing branch and memory TLBs (Part 1 of 2)

Benchmarking RISC-V IL, implementing branch and memory TLBs (Part 1 of 2)

Fuzz Theory: Making random fuzzable program

Fuzz Theory: Making random fuzzable program

Fixing FalkIL TLB bug, TLB performance tweaks, and futures trading

Fixing FalkIL TLB bug, TLB performance tweaks, and futures trading

Benchmarking RISC-V IL, implementing branch and memory TLBs (Part 2 of 2)

Benchmarking RISC-V IL, implementing branch and memory TLBs (Part 2 of 2)

RISC-V Fuzzer Optimization

RISC-V Fuzzer Optimization

Writing an Extremely Fast RISC-V Emulator and Fuzzing with it! (Part 1/2)

Writing an Extremely Fast RISC-V Emulator and Fuzzing with it! (Part 1/2)

Writing an Extremely Fast RISC-V Emulator and Fuzzing with it! (Part 2/2)

Writing an Extremely Fast RISC-V Emulator and Fuzzing with it! (Part 2/2)

Deterministic performance counter overflow interrupts?

Deterministic performance counter overflow interrupts?

Finishing up fuzzing ctags

Finishing up fuzzing ctags

Vectorized Emulation: Branches (Part 2: The solution)

Vectorized Emulation: Branches (Part 2: The solution)

Vectorized Emulation: Branches (Part 1: The problem)

Vectorized Emulation: Branches (Part 1: The problem)

Paper Review - Building Fast Fuzzers (Part 2 of 2)

Paper Review - Building Fast Fuzzers (Part 2 of 2)

Paper Review - Building Fast Fuzzers (Part 1 of 2)

Paper Review - Building Fast Fuzzers (Part 1 of 2)

Paper Review - CacheOut (Part 1 of 2)

Paper Review - CacheOut (Part 1 of 2)

Paper Review - CacheOut (Part 2 of 2)

Paper Review - CacheOut (Part 2 of 2)

Data analysis on Intel load port monitoring

Data analysis on Intel load port monitoring

Creating cycle-by-cycle monitoring of Intel load ports

Creating cycle-by-cycle monitoring of Intel load ports

implementing minrepro in tkofuzz

implementing minrepro in tkofuzz

Improving Vectorized Emulation Graph Performance

Improving Vectorized Emulation Graph Performance

Improved our ctags fuzzing and found a global controlled overflow!

Improved our ctags fuzzing and found a global controlled overflow!

Finding Heartbleed with fuzzing and then fuzzing ctags

Finding Heartbleed with fuzzing and then fuzzing ctags

Implementing coverage and feedback for a JIT and finding bugs in a CSV parser

Implementing coverage and feedback for a JIT and finding bugs in a CSV parser

Benchmarking worst case 6502 JIT and making custom HW with ASAN-style protections

Benchmarking worst case 6502 JIT and making custom HW with ASAN-style protections

Benchmarking the 6502 JIT

Benchmarking the 6502 JIT

Implementing SSA IL optimization passes and first 6502 exec!

Implementing SSA IL optimization passes and first 6502 exec!

Getting first JIT execution in the new vectorized emulator

Getting first JIT execution in the new vectorized emulator

Root Causing a type confusion bug in calc.exe

Root Causing a type confusion bug in calc.exe

Structure layout, type confusions and why they are exploitable

Structure layout, type confusions and why they are exploitable

Implementing System-level time travel debugging (Part 1/2)

Implementing System-level time travel debugging (Part 1/2)

Implementing System-level time travel debugging (Part 2/2)

Implementing System-level time travel debugging (Part 2/2)

Setting up calc.exe for determinsitic snapshot fuzzing

Setting up calc.exe for determinsitic snapshot fuzzing

Trying to groom calc.exe crashes into controlable crashes

Trying to groom calc.exe crashes into controlable crashes

Improving the live calc.exe fuzzer (Part 2 of 2)

Improving the live calc.exe fuzzer (Part 2 of 2)

Adding coverage to the live calc.exe fuzzer (Part 1 of 2)

Adding coverage to the live calc.exe fuzzer (Part 1 of 2)

TKO module list bug fix and some calc.exe groom attempts

TKO module list bug fix and some calc.exe groom attempts

Fuzzing calc.exe

Fuzzing calc.exe

Orange Slice: Writing the Hypervisor

Orange Slice: Writing the Hypervisor

Orange Slice: Allocators and Multiprocessing

Orange Slice: Allocators and Multiprocessing

Orange Slice: The beginnings of a determinsitic hypervisor

Orange Slice: The beginnings of a determinsitic hypervisor

Getting Local Code Execution on Bluetooth Chipset

Getting Local Code Execution on Bluetooth Chipset

Bluetooth Chipset Reversing with Ghidra Part 2

Bluetooth Chipset Reversing with Ghidra Part 2

Reversing Android Bluetooth Chipsets with Ghidra

Reversing Android Bluetooth Chipsets with Ghidra

Ghidra Day Song

Ghidra Day Song

Travelling through time with WinDbg at a system level

Travelling through time with WinDbg at a system level

Fuzzing Windows with a CCTV-style View

Fuzzing Windows with a CCTV-style View

Full system coverage in realtime with applepie: 4.2 million unique coverage locations in 4 minutes

Full system coverage in realtime with applepie: 4.2 million unique coverage locations in 4 minutes

Watch me fail to debug my own code for about 7 hours

Watch me fail to debug my own code for about 7 hours

Collecting 350k unique coverage symbols during Windows boot

Collecting 350k unique coverage symbols during Windows boot

Adding Coverage and Symbol Support to applepie

Adding Coverage and Symbol Support to applepie

applepie Coverage + Symbols

applepie Coverage + Symbols

applepie: Building applepie, booting Windows 7, browsing the web

applepie: Building applepie, booting Windows 7, browsing the web

Adventures in Fuzzing - NYU Talk 2018

Adventures in Fuzzing - NYU Talk 2018

AVX512 Convolution Implementation Optimization for Knights Landing

AVX512 Convolution Implementation Optimization for Knights Landing

Fuzzing radare2

Fuzzing radare2

Falkervisor Overview

Falkervisor Overview

x86 BIOS reversing, osdev, etc. Setting up a fan controller for my OS!

x86 BIOS reversing, osdev, etc. Setting up a fan controller for my OS!

Custom VT-x Powered OS For Running Snapshotted Applications

Custom VT-x Powered OS For Running Snapshotted Applications

Windows POSIX API Local Info Disclosure 0day

Windows POSIX API Local Info Disclosure 0day

IDA Dependency Loader

IDA Dependency Loader

Decompiling 'kielbasa' Secuinside2012

Decompiling 'kielbasa' Secuinside2012