Reposted by Damian PfammatterPhrack Zine @phrack.org · 07/09/2026Sneak peek 👀 👀 👀 👀 Coming soon from your friends at Phrack! 0238
Damian Pfammatter @damianpfammatter.bsky.social · 15/07/2026Things are getting fun: Teach agents how to find sources/sinks, do static taint analysis with our #Binja plugin #Mole, and triage paths with live/emulated target access to validate findings autonomously. Reported 2 new vulns: remote unauth. stack BOF + auth. OS command injection. 000
Reposted by Damian Pfammatterdhulliger @handle.invalid · 08/06/2026Shoutout to Mole, our @binary.ninja plugin that made these findings possible. Mole finds interesting execution paths in binaries by performing backward slicing on variables in MLIL SSA form, enabling static taint analysis. Mole: github.com/cyber-defenc... Advisory: certvde.com/en/advisorie...certvde.com MBS: Several security vulnerabilities in the UGW web GUI 032
Damian Pfammatter @damianpfammatter.bsky.social · 02/04/2026We analyzed how different LLMs and prompt strategies impact bug triage performance in our #BinaryNinja plugin #Mole. TL;DR: Real-world code is far harder than synthetic benchmarks, false positives dominate, stability varies by model, and prompt tuning is strongly model-dependent. 110
Damian Pfammatter @damianpfammatter.bsky.social · 10/12/2025First two unauthenticated RCE CVEs published - Discovered with the help of our #Binja plugin #Mole! 🔗 Advisory: certvde.com/en/advisorie... @ruheabteil.ch 🔗 Mole: github.com/cyber-defenc... More vulnerabilities have been reported - stay tuned for upcoming advisories.certvde.com WAGO: Vulnerabilities in WAGO Industrial-Managed Switches 022
Reposted by Damian Pfammatterdhulliger @handle.invalid · 22/10/2025Earlier that year @damianpfammatter.bsky.social and me had time to play with domotics equipment. Finally the patches and advisories were released: www.certvde.com/en/advisorie...certvde.com Sauter: Multiple vulnerabilities in SAUTER modulo 6 011
Damian Pfammatter @damianpfammatter.bsky.social · 22/12/2024I just found out my tool was listed as one of the highlights for #BHEU Arsenal! It was a pleasure presenting it, and I hope the audience enjoyed it as much as I did. 000
