Sign in

nicoski

@nicoski.bsky.social
70 followers 119 following 2 posts

Security enthusiast: RE, VR, exploits and stuff

PostsRepliesMedia
Reposted by nicoski
Synacktiv @synacktiv.com · 22/09/2025
A technical look at @grapheneos.org Hardened Malloc, a memory allocator designed to mitigate heap corruption vulnerabilities (UAF, overflows) and break common exploit primitives. Deep dive for security researchers & exploit developers by @nicoski.bsky.social www.synacktiv.com/en/publicati...
synacktiv.com
Exploring GrapheneOS secure allocator: Hardened Malloc
Exploring GrapheneOS secure allocator: Hardened Malloc
0116
Reposted by nicoski
Synacktiv @synacktiv.com · 11/07/2025
Ever thought your kitchen appliance could harbor a persistent threat? We reverse-engineered the Thermomix TM5 and uncovered vulnerabilities allowing arbitrary code execution, persistence, and secure boot bypass. Discover our step-by-step breakdown! www.synacktiv.com/en/publicati...
synacktiv.com
Let Me Cook You a Vulnerability: Exploiting the Thermomix TM5
Hardware Analysis The Thermomix TM5 is a multifunctional kitchen appliance composed of two key electronic boards: the power board, which handles the motor and heating functions, and the main board, w
066
Reposted by nicoski
Synacktiv @synacktiv.com · 05/06/2025
It's already #SSTIC2025 day 2! @remi-j.bsky.social and us3r present the Windows kernel shadow stack mitigation 🪟
095
Reposted by nicoski
Synacktiv @synacktiv.com · 04/06/2025
For our first talk, Ambre presents her previous research about firmware images identification #SSTIC2025
063
Reposted by nicoski
Synacktiv @synacktiv.com · 10/04/2025
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b.bsky.social took a long journey down a rabbit hole to understand its root cause. www.synacktiv.com/en/publicati...
synacktiv.com
iOS 18.4 - dlsym considered harmful
Observations We first observed the bug in a custom iOS application compiled for the arm64e architecture (thus supporting PAC instructions).
0159
Reposted by nicoski
Synacktiv @synacktiv.com · 10/03/2025
Interested in vulnerabilities in video games? 🎮 @tomtombinary.bsky.social presented critical flaws in Neverwinter Nights Enhanced Edition at #Hexacon, which could allow attackers to take control of players' computers. 🛡️ Check out the full details of these bugs!👇 www.synacktiv.com/en/publicati...
synacktiv.com
Exploiting Neverwinter Nights
Introduction Neverwinter Nights is an RPG based video game developed by BioWare and Obsidian Entertainment in 2002.
088
Reposted by nicoski
Hacker News Top Stories @hackernewsbot.bsky.social · 02/03/2025
Speedrunners are vulnerability researchers, they just don't know it yet Discussion
zetier.com
Speedrunners = vulnerability researchers
Video game enthusiasts are developing experience in the cybersecurity industry by accident. Discover how gaming skills can translate into intriguing careers.
096
Reposted by nicoski
Phrack Zine @phrack.org · 15/02/2025
Hackers rejoice! We are releasing the Phrack 71 PDF for you today! Don't forget this year is Phrack's 40th anniversary release! Send in your contribution and be part of this historical issue! The CFP is still open, you can find it and the PDF link at phrack.org
phrack.org
.:: Phrack Magazine ::.
Phrack staff website.
26232
Reposted by nicoski
DiscoStarslayer @disco.camp · 08/01/2025
Today I learned that the N64 game "Morita Shogi 64", a Shogi game with a built in modem for online play, has a RCE exploit that was granted a CVE nvd.nist.gov/vuln/detail/...
Image of the game cartridge showing the RJ15 jack at the top for modem connectivity.

Image contributed by GreatPants and shared from fandom: https://nintendo.fandom.com/wiki/Morita_Shogi_64?file=Sans_titre5.png
07430
Reposted by nicoski
2dos @ DK64Randomizer.com @2dos.dk64randomizer.com · 12/01/2025
Words cannot describe how amazing that Crazy Taxi run was. Thanks for tuning in! VOD is already up on YouTube for those who missed it or want to see it again! #AGDQ2025 youtu.be/G4AomNJHzHk?...
youtu.be
Crazy Taxi with Live Backing Band by chuckles825 in 18:59 - Awesome Games Done Quick 2025
YouTube video by Games Done Quick
22936452
Reposted by nicoski
Synacktiv @synacktiv.com · 22/11/2024
We are now on #BlueSky! We'll start posting our news here too 😊
1228
nicoski @nicoski.bsky.social · 18/12/2023
Discover a new tool for reverse engineers: "Frinet", by myr and hexabeast
synacktiv.com
Frinet: reverse-engineering made easier
011
nicoski @nicoski.bsky.social · 18/12/2023
Hello bsky!
010