OtterSec's banner
OtterSec's profile picture

OtterSec

@osec_io • 21,336 subscribers

Audits that protect blockchain ideas.

Shorts

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.

21,777 views

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.
0:34
osec_io's profile picture

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

OtterSec

226,936 views • 9 months ago

We recently achieved guest-to-host escape by exploiting a QEMU 0day. We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive. Writeup coming next week.
0:25
osec_io's profile picture

We recently achieved guest-to-host escape by exploiting a QEMU 0day. We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive. Writeup coming next week.

OtterSec

74,311 views • 6 months ago

No more content to load