About
About Me
I am a security researcher focusing on reverse engineering, vulnerability research and exploit development. I have experience in low level OS and Linux Kernel development.
Articles
From vulnerability report to a crafted packet using instrumentation
Year: 2019
Link: https://invictus1306.github.io/vulnerabilitis/2018/12/29/functrace.html
ARM exploitation for IoT
Year: 2018
Link: https://www.exploit-db.com/docs/english/43906-arm-exploitation-for-iot.pdf
ARM exploitation for IoT – Episode 3
Year: 2017
Link: https://quequero.org/2017/11/arm-exploitation-iot-episode-3/
ARM exploitation for IoT – Episode 2
Year: 2017
Link: https://quequero.org/2017/09/arm-exploitation-iot-episode-2/
ARM exploitation for IoT – Episode 1
Year: 2017
Link: https://quequero.org/2017/07/arm-exploitation-iot-episode-1/
Kaspersky Hooking Engine Analysis
Year: 2014
Link: https://quequero.org/2014/10/kaspersky-hooking-engine-analysis/
CVE-2013-1763 – kernel linux vulnerability
Year: 2013
Link: http://quequero.org/2013/03/cve-2013-1763-sock_diag_handlers-local-root-exploit-analysis/
Shellcode Analysis
Year: 2013
Link: http://resources.infosecinstitute.com/shellcode-analysis-on-linux-x86-32bit/
Python tutorials
Year: 2012
Link: http://www.html.it/guide/guida-python/
Conferences / Workshops
Title - functrace: A quick way to analyze binaries - Talk
Conference: @WarConPL
Year: 2019 (June)
Link: https://github.com/invictus1306/functrace
Title - Bug classification with r2 - Talk
Conference: r2con
Year: 2018 (September)
Link: https://github.com/invictus1306/beebug
Title - ARM shellcode and exploit development - Workshop
Conference: BSidesMunich
Year: 2018 (April)
Link: https://github.com/invictus1306/Workshop-BSidesMunich2018
Vulnerablities
CVE-2018-6191
Year: 2018
Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6191
CVE-2018-5759
Year: 2018
Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5759
VLC Web Interface 2.2.1 - Metadata Title XSS Vulnerability
Year: 2015
Link: https://www.exploit-db.com/exploits/38706/
VLC 2.2.1 Stack Overflow
Year: 2015
Link: https://www.exploit-db.com/exploits/38485/
Open source
QuickPatch
Link: https://github.com/invictus1306/QuickPatch
functrace - A function tracer
Link: https://github.com/invictus1306/functrace
beebug - A tool for checking exploitability
Link: https://github.com/invictus1306/beebug
radare2
Link: https://github.com/radare/radare2/commits?author=invictus1306