https://blog.trailofbits.com/2muchrock41hand/2008-05-09T02:15:00Zhttps://blog.trailofbits.com/wp-content/uploads/2008/05/2muchrock41hand.jpgToo much rock for one handPhoto by Divide, 2007https://blog.trailofbits.com/machackerscover/2009-02-22T22:17:04Zhttps://blog.trailofbits.com/wp-content/uploads/2009/02/machackerscover.jpgmachackerscoverThe Mac Hacker's Handbookhttps://blog.trailofbits.com/2012/10/29/ending-the-love-affair-with-exploitshield/2012-10-24T23:31:12Zhttps://blog.trailofbits.com/wp-content/uploads/2012/10/es-1.pngES-1https://blog.trailofbits.com/codecomparison/2013-01-25T00:40:15Zhttps://blog.trailofbits.com/wp-content/uploads/2013/01/codecomparison.pngcodecomparisonhttps://blog.trailofbits.com/bug1/2014-04-27T15:42:36Zhttps://blog.trailofbits.com/wp-content/uploads/2014/04/bug1.pngbug1https://blog.trailofbits.com/bug2/2014-04-27T15:42:47Zhttps://blog.trailofbits.com/wp-content/uploads/2014/04/bug2.pngbug2https://blog.trailofbits.com/2014/06/03/dear-darpa-challenge-accepted/2014-06-03T22:35:52Zhttps://blog.trailofbits.com/wp-content/uploads/2014/06/cgc_stacked_coloronblack.jpgCGC_Stacked_ColoronBlackhttps://blog.trailofbits.com/2014/06/23/a-preview-of-mcsema/2014-06-19T22:40:25Zhttps://blog.trailofbits.com/wp-content/uploads/2014/06/ida_timespi_original.pngIDA_TimesPi_Originalhttps://blog.trailofbits.com/2014/06/23/a-preview-of-mcsema/2014-06-19T22:40:38Zhttps://blog.trailofbits.com/wp-content/uploads/2014/06/figure_8_2.pngfigure_8_2https://blog.trailofbits.com/2014/06/23/a-preview-of-mcsema/2014-06-19T22:40:41Zhttps://blog.trailofbits.com/wp-content/uploads/2014/06/ida_timespi_lifted.pngIDA_TimesPi_Liftedhttps://blog.trailofbits.com/10487588_588177764633699_1497332133553342074_n/2014-07-26T00:22:57Zhttps://blog.trailofbits.com/wp-content/uploads/2014/07/10487588_588177764633699_1497332133553342074_n.jpg10487588_588177764633699_1497332133553342074_nhttps://blog.trailofbits.com/2014/07/30/education-initiative-spotlight-build-it-break-it/2014-07-27T20:28:33Zhttps://blog.trailofbits.com/wp-content/uploads/2014/07/buildit_breakit.pngbuildit_breakitBuilt it Break it is a first-of-its-kind security challenge run by UMDhttps://blog.trailofbits.com/2014/08/20/remastering-applications-by-obfuscating-during-compilation/2014-08-19T17:20:54Zhttps://blog.trailofbits.com/wp-content/uploads/2014/08/image00.pngimage00adsfhttps://blog.trailofbits.com/2014/08/20/remastering-applications-by-obfuscating-during-compilation/2014-08-19T17:19:50Zhttps://blog.trailofbits.com/wp-content/uploads/2014/08/image01.pngimage01asdfasdfhttps://blog.trailofbits.com/1/2014-09-01T23:21:43Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/1.jpegAppleID Login Pagehttps://blog.trailofbits.com/1_edit/2014-09-01T23:24:48Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/1_edit.png1_edithttps://blog.trailofbits.com/2_edit/2014-09-01T23:27:10Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/2_edit.png2_edithttps://blog.trailofbits.com/3_edit/2014-09-01T23:29:47Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/3_edit.png3_edithttps://blog.trailofbits.com/4_edit/2014-09-01T23:29:58Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/4_edit.png4_edithttps://blog.trailofbits.com/5_edit/2014-09-01T23:30:08Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/5_edit.png5_edithttps://blog.trailofbits.com/6_edit/2014-09-01T23:31:53Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/6_edit.png6_edithttps://blog.trailofbits.com/7_edit/2014-09-01T23:33:14Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/7_edit.png7_edithttps://blog.trailofbits.com/9_edit/2014-09-01T23:39:10Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/9_edit.png9_edithttps://blog.trailofbits.com/8_edit/2014-09-01T23:39:21Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/8_edit.jpg8_edithttps://blog.trailofbits.com/10_edit/2014-09-01T23:40:14Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/10_edit.png10_edithttps://blog.trailofbits.com/11_edit/2014-09-01T23:43:40Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/11_edit.png11_edithttps://blog.trailofbits.com/12_edit/2014-09-01T23:45:37Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/12_edit.png12_edithttps://blog.trailofbits.com/13_edit/2014-09-01T23:48:14Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/13_edit.png13_edithttps://blog.trailofbits.com/14_edit/2014-09-01T23:48:57Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/14_edit.png14_edithttps://blog.trailofbits.com/1_edit-2/2014-09-02T00:36:41Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/1_edit1.png1_edithttps://blog.trailofbits.com/02_edit/2014-09-02T00:38:08Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/02_edit.png02_edithttps://blog.trailofbits.com/03_edit/2014-09-02T00:42:50Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/03_edit.png03_edithttps://blog.trailofbits.com/04_edit/2014-09-02T00:47:39Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/04_edit.png04_edithttps://blog.trailofbits.com/05_edit/2014-09-02T00:48:21Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/05_edit.png05_edithttps://blog.trailofbits.com/06_edit/2014-09-02T00:49:10Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/06_edit.png06_edithttps://blog.trailofbits.com/08_edit/2014-09-02T00:50:00Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/08_edit.png08_edithttps://blog.trailofbits.com/2facode/2014-09-02T00:51:38Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/2facode.png2facodehttps://blog.trailofbits.com/09_edit/2014-09-02T00:52:31Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/09_edit.png09_edithttps://blog.trailofbits.com/10_edit-2/2014-09-02T00:53:15Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/10_edit1.png10_edithttps://blog.trailofbits.com/11_edit-2/2014-09-02T00:54:48Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/11_edit.jpg11_edithttps://blog.trailofbits.com/2014/09/02/enabling-two-factor-authentication-2fa-for-apple-id-and-dropbox/2014-09-02T19:23:51Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/screen-shot-2014-09-02-at-3-22-31-pm.pngScreen Shot 2014-09-02 at 3.22.31 PMtwofactorauth.org maintains a list of websites that support 2FAhttps://blog.trailofbits.com/2014/09/02/enabling-two-factor-authentication-2fa-for-apple-id-and-dropbox/2014-09-02T19:29:43Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/screen-shot-2014-09-02-at-3-29-02-pm.pngScreen Shot 2014-09-02 at 3.29.02 PMhttps://blog.trailofbits.com/10_edit-3/2014-09-02T21:25:16Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/10_edit2.png10_edithttps://blog.trailofbits.com/10_new_edit/2014-09-02T21:30:43Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/10_new_edit.png10_new_edithttps://blog.trailofbits.com/2014/09/02/enabling-two-factor-authentication-2fa-for-apple-id-and-dropbox/2014-09-16T20:31:59Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/2fa_icloud.jpg2fa_icloudhttps://blog.trailofbits.com/2014/09/02/enabling-two-factor-authentication-2fa-for-apple-id-and-dropbox/2014-09-16T20:33:07Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/elcom_fail.jpgelcom_failhttps://blog.trailofbits.com/2014/09/29/nyu-womens-cybersecurity-symposium/2014-09-28T23:23:29Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/womenssymposium.jpgwomenssymposiumhttps://blog.trailofbits.com/2014/09/29/nyu-womens-cybersecurity-symposium/2014-09-28T23:28:37Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/women.jpgNYU-Poly Cybersecurity Women's Symposiumhttps://blog.trailofbits.com/2014/09/29/nyu-womens-cybersecurity-symposium/2014-09-28T23:31:27Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/women2.jpgNYU-Poly Cybersecurity Women's Symposiumhttps://blog.trailofbits.com/2014/09/29/nyu-womens-cybersecurity-symposium/2014-09-28T23:34:07Zhttps://blog.trailofbits.com/wp-content/uploads/2014/09/women3.jpgNYU-Poly Women's Cybersecurity Symposiumhttps://blog.trailofbits.com/2014/11/25/close-encounters-with-symbolic-execution/2014-11-25T00:14:43Zhttps://blog.trailofbits.com/wp-content/uploads/2014/11/maze.pngmazeAn example maze. The step spaces are blank, the walls are +-|, the END marker is the # sign, and the current path is the X's.https://blog.trailofbits.com/2014/12/04/close-encounters-with-symbolic-execution-part-2/2014-12-03T19:56:53Zhttps://blog.trailofbits.com/wp-content/uploads/2014/12/image00.pngMaze (Before)https://blog.trailofbits.com/2014/12/04/close-encounters-with-symbolic-execution-part-2/2014-12-03T19:57:09Zhttps://blog.trailofbits.com/wp-content/uploads/2014/12/image01.pngMaze (After)https://blog.trailofbits.com/2015/05/05/empire-hacking/2015-05-05T18:27:43Zhttps://blog.trailofbits.com/wp-content/uploads/2015/05/empirehacking_poster_final.pngEmpireHacking_Poster_Finalhttps://blog.trailofbits.com/2015/05/13/closing-the-windows-gap/2015-05-13T19:41:28Zhttps://blog.trailofbits.com/wp-content/uploads/2015/05/missilegap_nie11-8-60.pngWindowsGapProjected magnitude of the Windows gaphttps://blog.trailofbits.com/2015/05/13/closing-the-windows-gap/2015-05-13T19:49:07Zhttps://blog.trailofbits.com/wp-content/uploads/2015/05/img_0676.jpgalexThis man knows Windows and thinks you should too.https://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:08:01Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image12.pngimage12Separate the role for administrative access to your domainhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:09:31Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image15.pngimage15Limit what can go wrong with emailhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:10:01Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image14.pngimage14Disable automatic forwardhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:10:21Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image11.pngimage11Keep your mail to yourselfhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:11:15Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image03.pngimage03Why is this even an option? Turn it on already!https://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:11:45Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image10.pngimage10Delete or suspend unmaintained accountshttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:12:22Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image09.pngimage09Disable contact sharinghttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:13:11Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image13.pngimage13Stricter defaults for Drivehttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:13:42Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image00.pngimage00Stricter defaults for Drivehttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:14:10Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image07.pngimage07Help users recognize who they are talking tohttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:14:37Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image02.pngimage02Don't overstore data if you don't need tohttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:15:00Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image06.pngimage06Help users understand who can see their Sitehttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:15:32Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image01.pngimage01Turn on DKIM for your domain and get this green checkhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:15:58Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image04.pngimage04There are dozens of services you'll never use. Disable them.https://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:16:25Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image05.pngimage05Turn on alerts and be liberal with who gets themhttps://blog.trailofbits.com/2015/07/07/how-to-harden-your-google-apps/2015-07-07T18:17:14Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image08.pngimage08Attachment compliance options could be useful to play withhttps://blog.trailofbits.com/2015/07/15/how-we-fared-in-the-cyber-grand-challenge/2015-07-15T04:35:33Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image001.pngFigure 5: Average and median performance scores of the top ten qualifying event participants. Orange bars signify finalists.https://blog.trailofbits.com/2015/07/15/how-we-fared-in-the-cyber-grand-challenge/2015-07-15T04:31:44Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image011.pngFigure 2: Our bug finding architecture. It is a feedback-based architecture that explores the state space of a program using fuzzing and symbolic execution.https://blog.trailofbits.com/2015/07/15/how-we-fared-in-the-cyber-grand-challenge/2015-07-15T04:34:16Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image021.pngFigure 3: Teams in the qualifying event ranked by patch effectiveness (security score). Orange bars signify finalists.https://blog.trailofbits.com/2015/07/15/how-we-fared-in-the-cyber-grand-challenge/2015-07-15T04:34:54Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image031.pngFigure 4: The count of perfectly functional, partially functional, and nonfunctional challenges submitted by each of the top 10 teams in the qualifying event. Orange bars signify finalists.https://blog.trailofbits.com/2015/07/15/how-we-fared-in-the-cyber-grand-challenge/2015-07-15T04:30:32Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image041.pngFigure 1: Teams in the qualifying event ranked by number of bugs found. Orange bars signify finalists.https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:28:03Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image002.pngimage00https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:28:05Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image012.pngimage01https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:28:06Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image022.pngimage02https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:28:07Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image032.pngimage03https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:28:09Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/image042.pngimage04https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:56:49Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/untitled-drawing.pngUntitled drawinghttps://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T02:59:42Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/nop.pngnophttps://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T03:04:48Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/c53eba45e0.pngc53eba45e0https://blog.trailofbits.com/2015/07/21/hardware-side-channels-in-the-cloud/2015-07-21T03:24:33Zhttps://blog.trailofbits.com/wp-content/uploads/2015/07/screen-shot-2015-07-20-at-11-22-36-pm.pngScreen Shot 2015-07-20 at 11.22.36 PMhttps://blog.trailofbits.com/2015/09/10/summer-trail-of-bits/2015-09-03T04:27:35Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image00.jpghttps://blog.trailofbits.com/2015/09/10/summer-trail-of-bits/2015-09-03T15:15:02Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image00.pngfile_diagramhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:24:38Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image15.pngimage15https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:27:16Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image21.pngimage21https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:28:08Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image09.pngimage09Main IDAPython Scripthttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:29:12Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image16.pngimage16IDAPython script to dump prime index maphttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:29:59Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image25.pngimage25IDAPython script to dump "rounds"https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:31:34Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image08.pngimage08https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:32:49Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image29.pngimage29https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:33:38Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image22.pngimage22In Windbghttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:34:05Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image03.pngimage03In Windbghttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:34:39Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image24.pngimage24In Windbghttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:35:21Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image13.pngimage13In Windbghttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:36:28Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image28.pngimage28https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:37:27Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image23.pngimage23https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:37:41Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image31.pngimage31https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:38:21Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image30.pngimage30Python Pseudocodehttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:39:46Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image001.pngimage00https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:40:17Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image19.pngimage19https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:41:15Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image01.pngimage01Python Pseudocodehttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:41:46Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image10.pngimage10https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:42:20Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image05.pngimage05https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:43:00Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image07.pngimage07https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:43:24Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image17.pngimage17https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:44:26Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image04.pngimage04Diagram showing the different decryption stageshttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:44:54Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image14.pngimage14Indexing Algorithmhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:45:28Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image26.pngimage26Math Used to Calculate Loops Neededhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:46:03Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image02.pngimage02Python-Windbg Pseudo Codehttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:46:20Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image12.jpgimage12https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:51:51Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/screen-shot-2015-09-08-at-7-51-24-pm.pngScreen Shot 2015-09-08 at 7.51.24 PMhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:52:46Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/screen-shot-2015-09-08-at-7-52-32-pm.pngScreen Shot 2015-09-08 at 7.52.32 PMhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:54:19Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/screen-shot-2015-09-08-at-7-54-05-pm.pngScreen Shot 2015-09-08 at 7.54.05 PMhttps://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:55:35Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image06-1.pngimage06-1https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:56:56Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image11-1.pngimage11-1https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:57:52Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image20-1.pngimage20-1https://blog.trailofbits.com/2015/09/09/flare-on-reversing-challenges-2015/2015-09-08T23:58:48Zhttps://blog.trailofbits.com/wp-content/uploads/2015/09/image27-1.pngimage27-1https://blog.trailofbits.com/2015/10/30/why-we-give-so-much-to-csaw/2015-10-30T05:11:50Zhttps://blog.trailofbits.com/wp-content/uploads/2015/10/image00.jpgTrail of Bits T-Shirthttps://blog.trailofbits.com/2015/10/30/why-we-give-so-much-to-csaw/2015-10-30T05:16:11Zhttps://blog.trailofbits.com/wp-content/uploads/2015/10/image00.pngSolution to Bricks of Goldhttps://blog.trailofbits.com/2015/12/15/self-hosted-video-chat-with-tuber/2015-12-14T17:17:33Zhttps://blog.trailofbits.com/wp-content/uploads/2015/12/tubertc_final.jpgTuberTC_FINALhttps://blog.trailofbits.com/2015/12/15/self-hosted-video-chat-with-tuber/2015-12-15T02:06:40Zhttps://blog.trailofbits.com/wp-content/uploads/2015/12/tuber.pngTuberTuber's loveable mascot, Karlhttps://blog.trailofbits.com/2016/01/05/lets-encrypt-the-internet/2016-01-05T04:45:53Zhttps://blog.trailofbits.com/wp-content/uploads/2016/01/letsencrypt-logo-horizontal.pngLet's EncryptLet’s Encrypt is an open, automated, and free SSL Certificate Authorityhttps://blog.trailofbits.com/2016/01/13/hacking-for-charity-automated-bug-finding-in-libotr/2016-01-12T23:43:48Zhttps://blog.trailofbits.com/wp-content/uploads/2016/01/image01.pngimage01https://blog.trailofbits.com/2016/01/13/hacking-for-charity-automated-bug-finding-in-libotr/2016-01-12T23:44:53Zhttps://blog.trailofbits.com/wp-content/uploads/2016/01/image02.pngimage02https://blog.trailofbits.com/2016/01/13/hacking-for-charity-automated-bug-finding-in-libotr/2016-01-12T23:45:42Zhttps://blog.trailofbits.com/wp-content/uploads/2016/01/image00.pngimage00https://blog.trailofbits.com/2016/02/09/tidas-a-new-service-for-building-password-less-apps/2016-02-09T03:24:15Zhttps://blog.trailofbits.com/wp-content/uploads/2016/02/tidas.pngTidasTidas: Make passwords obsoletehttps://blog.trailofbits.com/2016/02/09/tidas-a-new-service-for-building-password-less-apps/2016-02-09T03:26:42Zhttps://blog.trailofbits.com/wp-content/uploads/2016/02/tidas_green.pngTidasTidas: Make passwords obsoletehttps://blog.trailofbits.com/2016/02/17/apple-can-comply-with-the-fbi-court-order/2016-02-17T06:32:09Zhttps://blog.trailofbits.com/wp-content/uploads/2016/02/screen-shot-2016-02-16-at-11-14-30-pm.pngScreen Shot 2016-02-16 at 11.14.30 PMThe Hardware Key is stored in the Secure Enclave in A7 and newer deviceshttps://blog.trailofbits.com/2016/02/17/apple-can-comply-with-the-fbi-court-order/2016-02-17T06:32:42Zhttps://blog.trailofbits.com/wp-content/uploads/2016/02/screen-shot-2016-02-16-at-11-15-18-pm.pngScreen Shot 2016-02-16 at 11.15.18 PMPasscode delays are enforced by the Secure Enclave in A7 and newer deviceshttps://blog.trailofbits.com/2016/02/17/apple-can-comply-with-the-fbi-court-order/2016-02-18T04:35:09Zhttps://blog.trailofbits.com/wp-content/uploads/2016/02/screen-shot-2016-02-17-at-11-31-16-pm.pngScreen Shot 2016-02-17 at 11.31.16 PMPasscodes can only be guessed once every 80mshttps://blog.trailofbits.com/2016/03/09/the-problem-with-dynamic-program-analysis/2016-03-09T16:31:59Zhttps://blog.trailofbits.com/wp-content/uploads/2016/03/image04.pngimage04https://blog.trailofbits.com/2016/03/09/the-problem-with-dynamic-program-analysis/2016-03-09T16:33:51Zhttps://blog.trailofbits.com/wp-content/uploads/2016/03/image03.pngLightHTTPD Use-After-Freehttps://blog.trailofbits.com/2016/03/09/the-problem-with-dynamic-program-analysis/2016-03-09T16:38:24Zhttps://blog.trailofbits.com/wp-content/uploads/2016/03/screen-shot-2016-03-09-at-11-37-41-am.pngFour steps to creating a data-flow graphhttps://blog.trailofbits.com/2016/04/01/hacker-handle-bounty/2016-04-01T02:39:39Zhttps://blog.trailofbits.com/wp-content/uploads/2016/03/image00.jpghttps://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:42:21Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image01.pngimage01https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:43:18Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image03.pngimage03https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:43:56Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image05.pngimage05https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:44:34Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image02.pngimage02https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:46:15Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image07.pngimage07https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:46:20Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image04.pngimage04https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:46:57Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image06.pngimage06https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T20:47:16Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/image00.pngimage00https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-05T21:58:21Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/screen-shot-2016-05-05-at-11-57-35-pm.pngScreen Shot 2016-05-05 at 11.57.35 PMhttps://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-06T09:44:12Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/screen-shot-2016-05-06-at-11-43-19-am.pngScreen Shot 2016-05-06 at 11.43.19 AMKenna's data on FREAK overlaps precisely with internet-wide scans from the University of Michiganhttps://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-12T17:44:03Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/screen-shot-2016-05-12-at-1-40-20-pm.pngScreen Shot 2016-05-12 at 1.40.20 PMWhat is the point of Kenna's contribution if it was not backed by their insights?https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/2016-05-12T17:54:51Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/screen-shot-2016-05-12-at-1-40-36-pm.pngScreen Shot 2016-05-12 at 1.40.36 PMhttps://blog.trailofbits.com/2016/06/03/2000-cuts-with-binary-ninja/2016-05-26T22:08:47Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/screen-shot-2016-05-25-at-9-50-04-pm.pngScreen Shot 2016-05-25 at 9.50.04 PMhttps://blog.trailofbits.com/2016/06/03/2000-cuts-with-binary-ninja/2016-05-26T22:11:32Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/binarynina-overview.pngbinarynina-overviewhttps://blog.trailofbits.com/2016/06/03/2000-cuts-with-binary-ninja/2016-05-26T22:11:40Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/binaryninja-ilview.pngbinaryninja-ilviewhttps://blog.trailofbits.com/2016/06/03/2000-cuts-with-binary-ninja/2016-05-26T22:11:43Zhttps://blog.trailofbits.com/wp-content/uploads/2016/05/binaryninja-inlinememcpy.pngbinaryninja-inlinememcpyhttps://blog.trailofbits.com/2016/06/23/its-time-to-take-ownership-of-our-image/2016-06-23T02:42:14Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/stock-image-fail-soldering-iron-bob-byron-1.jpgstock-image-fail-soldering-iron-bob-byron-1https://blog.trailofbits.com/2016/06/23/its-time-to-take-ownership-of-our-image/2016-06-23T02:44:37Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/stock-photo-88593521-scientist-uses-modern-technology-for-its-research.jpgstock-photo-88593521-scientist-uses-modern-technology-for-its-researchhttps://blog.trailofbits.com/2016/06/23/its-time-to-take-ownership-of-our-image/2016-06-23T02:45:08Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/depositphotos_11605816-security-concept-lock-on-digital.jpgdepositphotos_11605816-Security-concept-lock-on-digitalhttps://blog.trailofbits.com/2016/06/23/its-time-to-take-ownership-of-our-image/2016-06-23T03:04:07Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/ck755riwkaa5pon.jpgCk755rIWkAA5ponhttps://blog.trailofbits.com/2016/06/23/its-time-to-take-ownership-of-our-image/2016-06-23T03:06:48Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/shot0737.jpgshot0737https://blog.trailofbits.com/2016/06/28/start-using-the-secure-enclave-crypto-api/2016-06-27T23:21:19Zhttps://blog.trailofbits.com/wp-content/uploads/2016/06/tidas-login.pngtidas-loginhttps://blog.trailofbits.com/2016/07/11/why-i-didnt-catch-any-pokemon-today/2016-07-12T03:42:40Zhttps://blog.trailofbits.com/wp-content/uploads/2016/07/tokens.pngtokenshttps://blog.trailofbits.com/2016/07/11/why-i-didnt-catch-any-pokemon-today/2016-07-12T05:20:00Zhttps://blog.trailofbits.com/wp-content/uploads/2016/07/screen-shot-2016-07-12-at-7-19-44-am.pngScreen Shot 2016-07-12 at 7.19.44 AMhttps://blog.trailofbits.com/2016/07/11/why-i-didnt-catch-any-pokemon-today/2016-07-13T12:33:15Zhttps://blog.trailofbits.com/wp-content/uploads/2016/07/screen-shot-2016-07-13-at-2-30-19-pm.pngScreen Shot 2016-07-13 at 2.30.19 PMhttps://blog.trailofbits.com/2016/08/02/engineering-solutions-to-hard-program-analysis-problems/2016-08-02T00:11:02Zhttps://blog.trailofbits.com/wp-content/uploads/2016/08/excavator-granary_720.jpgNote that proper pronounciation of GRR includes 2 fits held at head heighthttps://blog.trailofbits.com/2016/08/02/engineering-solutions-to-hard-program-analysis-problems/2016-08-02T00:12:29Zhttps://blog.trailofbits.com/wp-content/uploads/2016/08/frankenpse.jpgfrankenpsehttps://blog.trailofbits.com/2016/09/27/windows-network-security-now-easier-with-osquery/2016-09-26T00:49:31Zhttps://blog.trailofbits.com/wp-content/uploads/2016/09/doorman.jpgdoormanThe Windows version of osquery can talk to existing osquery fleet management tools, such as doorman. osquery for Windows has full support for TLS remote endpoints and certificate validation, just like the Unix version. In this screenshot, we are using an existing doorman instance to find all running processes on a Windows machine.https://blog.trailofbits.com/2016/09/27/windows-network-security-now-easier-with-osquery/2016-09-26T00:52:19Zhttps://blog.trailofbits.com/wp-content/uploads/2016/09/image00.pngosqueryiosqueryi, the interactive osquery shell, also works on Windows. In this screenshot we are using osquery to query the list of running processes and the cryptographic hash of a file.https://blog.trailofbits.com/2016/09/27/windows-network-security-now-easier-with-osquery/2016-09-26T20:04:13Zhttps://blog.trailofbits.com/wp-content/uploads/2016/09/osqueryi.pngosqueryiosqueryi, the interactive osquery shell, also works on Windows. In this screenshot we are using osquery to query the list of running processes and the cryptographic hash of a file.https://blog.trailofbits.com/2016/11/02/shin-grr-make-fuzzing-fast-again/2016-11-02T06:04:10Zhttps://blog.trailofbits.com/wp-content/uploads/2016/11/image00.pngGRRhttps://blog.trailofbits.com/2016/11/02/shin-grr-make-fuzzing-fast-again/2016-11-02T06:05:51Zhttps://blog.trailofbits.com/wp-content/uploads/2016/11/grr.pnggrrhttps://blog.trailofbits.com/2016/11/02/shin-grr-make-fuzzing-fast-again/2016-11-02T06:07:17Zhttps://blog.trailofbits.com/wp-content/uploads/2016/11/image01.pngNRFIN_00006https://blog.trailofbits.com/2016/12/27/lets-talk-about-cfi-microsoft-edition/2016-12-27T07:53:53Zhttps://blog.trailofbits.com/wp-content/uploads/2016/12/cfg_violation.pngcfg_violationhttps://blog.trailofbits.com/2016/12/27/lets-talk-about-cfi-microsoft-edition/2016-12-27T07:55:15Zhttps://blog.trailofbits.com/wp-content/uploads/2016/12/clang_valid_dests.pngclang_valid_destshttps://blog.trailofbits.com/2016/12/27/lets-talk-about-cfi-microsoft-edition/2016-12-27T07:55:39Zhttps://blog.trailofbits.com/wp-content/uploads/2016/12/vs_valid_dests.pngvs_valid_destshttps://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:21:07Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image1-01.pngimage1-01https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:21:16Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image1-02.pngimage1-02https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:21:22Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image1-03.pngimage1-03https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:21:27Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image1-04.pngimage1-04https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:24:31Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image2.pngimage2Low Level IL representation of the x86 instruction `repne cmpsb`https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:25:13Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image3.pngimage3IL tree for mov eax, 2https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:25:34Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image4.pngimage4IL tree for lea eax, [edx+ecx*4]https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:25:49Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/image5.pngimage5https://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:33:02Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/screen-shot-2017-01-30-at-2-32-06-pm.pngscreen-shot-2017-01-30-at-2-32-06-pmhttps://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-01-30T19:36:44Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/arm-x64-il-comparison.pngarm-x64-il-comparisonhttps://blog.trailofbits.com/2017/01/31/breaking-down-binary-ninjas-low-level-il/2017-02-11T19:20:22Zhttps://blog.trailofbits.com/wp-content/uploads/2017/01/traverse-il.pngtraverse-ilhttps://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/2017-02-12T19:59:16Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/annotated-vtable-dispatch-llil.pngannotated-vtable-dispatch-llilFigure 3: LLIL tree structures for the example vtable dispatch assembly, annotated with operation_handler calls and propagation of concrete values back up the call chain.https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/2017-02-12T19:26:13Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/constructor-example.pngconstructor-exampleAn example constructor. The highlighted instruction stores a vtable in the object’s structure.https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/2017-02-12T20:15:24Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/vtable-diagram.pngvtable-diagramFigure 1: Two classes inherit from a base virtual class. Each class's virtual table points to its respective implementation of the virtual functions.https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/2017-02-12T19:54:54Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/vtable-dispatch-llil.pngvtable-dispatch-llilFigure 2: LLIL tree structures for the example vtable dispatch assembly.https://blog.trailofbits.com/2017/02/16/the-smart-fuzzer-revolution/2017-02-15T23:31:48Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/img_4819.jpgimg_4819You should go to BSidesLisbonhttps://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:32:07Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/image01.pngimage01Figure 2: An idealized view of the valid indirect call targets for ClangCFI, CFGuard, and how they compare to the (idealized) set of valid indirect call targets.https://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:33:32Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/image00.pngimage00Figure 3: How real existing code relates to the indirect call targets for ClangCFI and CFGuard. There are valid, programmer intended targets that fall outside the domains defined by ClangCFI and CFGuard.https://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:34:48Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/screen-shot-2017-02-20-at-2-34-04-pm.pngscreen-shot-2017-02-20-at-2-34-04-pmValid linkages when using ClangCFI. These linkages are what is valid in general, assuming there are indirect calls between the linked items. Calls across dynamic shared objects (DSOs) calls are valid assuming the use of the experimental -f[no-]sanitize-cfi-cross-dso flaghttps://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:46:04Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/image03.pngClangCFIhttps://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:46:31Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/image02.pngCFGuardhttps://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:55:07Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/screen-shot-2017-02-20-at-2-54-02-pm.pngValid Destinations for Indirect Callshttps://blog.trailofbits.com/2017/02/20/the-challenges-of-deploying-security-mitigations/2017-02-20T13:57:03Zhttps://blog.trailofbits.com/wp-content/uploads/2017/02/screen-shot-2017-02-20-at-2-56-09-pm.pngscreen-shot-2017-02-20-at-2-56-09-pmasdfasdfhttps://blog.trailofbits.com/2017/03/23/april-means-infiltrate/2017-03-22T16:51:33Zhttps://blog.trailofbits.com/wp-content/uploads/2017/03/79f163e7-0355-4bb4-807c-856a2d337915.jpg79F163E7-0355-4BB4-807C-856A2D337915https://blog.trailofbits.com/2017/04/14/a-walk-down-memory-lane/2017-04-13T22:45:15Zhttps://blog.trailofbits.com/wp-content/uploads/2017/04/screenshot-from-2017-04-13-18-43-18.pngScreenshot from 2017-04-13 18-43-18https://blog.trailofbits.com/2017/05/15/magic-with-manticore/2017-05-15T01:39:20Zhttps://blog.trailofbits.com/wp-content/uploads/2017/05/image1.pngExample Magic binary challengehttps://blog.trailofbits.com/2017/07/30/an-extra-bit-of-analysis-for-clemency/2017-07-30T22:31:23Zhttps://blog.trailofbits.com/wp-content/uploads/2017/07/image1.jpgBinary Ninja in action during the competitionBinary Ninja in action during the competitionhttps://blog.trailofbits.com/2017/07/30/an-extra-bit-of-analysis-for-clemency/2017-07-30T22:32:04Zhttps://blog.trailofbits.com/wp-content/uploads/2017/07/image2.pngimage2Binary Ninja’s graph view allowed us to rapidly analyze control flow structureshttps://blog.trailofbits.com/2017/07/30/an-extra-bit-of-analysis-for-clemency/2017-07-30T23:24:06Zhttps://blog.trailofbits.com/wp-content/uploads/2017/07/image_uploaded_from_ios.jpgimage_uploaded_from_iosBinary Ninja in action during the competitionhttps://blog.trailofbits.com/2017/08/02/microsoft-didnt-sandbox-windows-defender-so-i-did/2017-07-31T15:31:13Zhttps://blog.trailofbits.com/wp-content/uploads/2017/07/image1.gifimage1Flying Sandbox Monster running Defender in a sandbox to scan a WannaCry binary.https://blog.trailofbits.com/2017/08/02/microsoft-didnt-sandbox-windows-defender-so-i-did/2017-07-31T15:31:54Zhttps://blog.trailofbits.com/wp-content/uploads/2017/07/image21.pngimage2The basic architecture of Flying Sandbox Monster.https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-09T14:49:14Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image2.pngimage2https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-09T14:49:59Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image1.pngimage1https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-09T14:50:11Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image3.pngimage3https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-09T14:50:23Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image4.pngimage4https://blog.trailofbits.com/2017/10/12/ios-jailbreak-detection-toolkit-now-available/2017-10-10T21:01:10Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image1.jpgimage1https://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:20:09Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/mike.jpgmikehttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:24:16Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/chris.jpgchrishttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:24:36Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/evan_t.pngevan_thttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:24:48Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/evan_s.jpgevan_shttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:24:58Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/alessandro.jpgalessandrohttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T03:29:19Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/evan_s1.jpgevan_shttps://blog.trailofbits.com/2017/10/16/our-team-is-growing/2017-10-16T13:23:12Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/img_6283-1.jpgIMG_6283 (1)https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-17T01:32:21Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/1.png1https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-17T01:32:33Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/3.png3https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-17T01:32:35Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/4.png4https://blog.trailofbits.com/2017/10/10/tracking-a-stolen-code-signing-certificate-with-osquery/2017-10-17T01:32:36Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/5.png5https://blog.trailofbits.com/2017/10/19/trail-of-bits-joins-the-enterprise-ethereum-alliance/2017-10-18T23:05:30Zhttps://blog.trailofbits.com/wp-content/uploads/2017/10/image11.pngEthereum Enterprise AllianceWe’re helping to secure Ethereum with our expertise, tools, and results.https://blog.trailofbits.com/2017/11/06/hands-on-the-ethernaut-ctf/2017-11-06T17:03:13Zhttps://blog.trailofbits.com/wp-content/uploads/2017/11/ethersplay_large.pngethersplay_largehttps://blog.trailofbits.com/2017/12/21/osquery-pain-points/2017-12-20T22:06:37Zhttps://blog.trailofbits.com/wp-content/uploads/2017/12/screen-shot-2017-12-20-at-5-05-57-pm.pngScreen Shot 2017-12-20 at 5.05.57 PMhttps://blog.trailofbits.com/2018/01/23/heavy-lifting-with-mcsema-2-0/2018-01-22T19:43:45Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image2.pngMcSemahttps://blog.trailofbits.com/2018/01/23/heavy-lifting-with-mcsema-2-0/2018-01-22T19:44:25Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image1.pngCome with me if you want to lifthttps://blog.trailofbits.com/2018/01/23/heavy-lifting-with-mcsema-2-0/2018-01-22T19:49:07Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/arnold.pngarnoldhttps://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:45:38Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image21.pngimage2https://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:47:59Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image6.pngimage6https://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:50:07Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image3.pngimage3https://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:55:23Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image11.pngimage1https://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:56:22Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image4.pngimage4https://blog.trailofbits.com/2018/01/30/an-accessible-overview-of-meltdown-and-spectre-part-1/2018-01-29T20:57:39Zhttps://blog.trailofbits.com/wp-content/uploads/2018/01/image5.pngimage5https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T01:43:59Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image6.pngBranch Prediction and Speculative ExecutionFigure 1: How branch misprediction leads to speculative execution. When the branch predictor makes an incorrect guess about the destination of a conditional branch, some instructions are speculatively executed. The execution of these instructions is undone, but their effects on the cache remain. Spectre causes the branch predictor to guess wrong and speculatively execute a carefully chosen set of instructions.https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T01:46:16Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image4.pngHypothetical Branch History Buffer OperationFigure 3: The branch history buffer is used to predict the target of indirect branches, so that the processor can execute them faster. When an indirect branch executes, an entry is written into the table. The table has limited space, and is indexed based on branch address. Because of this limitation, it is possible to “poison” the branch predictor and make it guess an attacker-chosen address for any indirect branch. In this hypothetical prediction example, any branch at an address ending in 045C would have the same predicted destination. https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T01:57:35Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image3.pngSpectre V2: Attack PreparationFigure 4: A simplified diagram of how a cloud computing system would look after completing Step 6 of this attack description. The attacker has gathered all information they need to conduct the attack, but the key part is still to come.https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T01:59:56Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image5.pngSpectre V2: Attack ExecutionFigure 5: This is the core of the Spectre V2 attack: specially crafted indirect branches can trick the Branch History Buffer into predicting an attacker-chosen speculative destination for an indirect branch. In this case, an indirect branch in the hypervisor is set to speculatively point to the eBPF interpreter code instead of its original location.https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T02:01:40Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image1.pngSpectre V2: Leaking SecretsFigure 6: A visualization of how secrets can be leaked in a Spectre V2 attack. The eBPF interpreter speculatively executes attacker-specified eBPF code which will read a secret value and use it to access reader. The effects of speculative execution can be observed via a cache-timing side channel.https://blog.trailofbits.com/2018/03/22/an-accessible-overview-of-meltdown-and-spectre-part-2/2018-03-22T02:06:15Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image2.pngComputer Memory Layout (Not to Scale)Figure 2: A hypothetical layout of reader and some secret data in computer memory. Because computer memory is laid out linearly, it is possible to access any part of it in terms of a positive or negative index into reader. Access to reader should be limited by its bounds, 0 to 255. If bounds checks are bypassed, even by a few speculatively executed instructions, it is possible to access memory without proper permission. https://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:05Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/disassembly.pngdisassemblyhttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:07Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/llil.pngLLILhttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:08Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/mlil_structures.pngMLIL_Structureshttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:10Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/mlil_vs_ssa.pngmlil_vs_ssahttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:11Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/mlil.pngMLILhttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:12Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/possible_values.pngpossible_valueshttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:25Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/find_heartbleed_new.pngfind_heartbleed_newhttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:09:27Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/find_heartbleed_old.pngfind_heartbleed_oldhttps://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-03-30T17:19:44Zhttps://blog.trailofbits.com/wp-content/uploads/2018/03/image8.pngimage8https://blog.trailofbits.com/2018/04/04/vulnerability-modeling-with-binary-ninja/2018-04-02T21:57:50Zhttps://blog.trailofbits.com/wp-content/uploads/2018/04/llil_example.pngllil_examplehttps://blog.trailofbits.com/2018/05/03/state-machine-testing-with-echidna/2018-05-01T15:26:04Zhttps://blog.trailofbits.com/wp-content/uploads/2018/04/790px-turnstile_state_machine_colored-svg.png790px-Turnstile_state_machine_colored.svghttps://blog.trailofbits.com/2018/05/28/collect-ntfs-forensic-information-with-osquery/2018-05-25T20:28:09Zhttps://blog.trailofbits.com/wp-content/uploads/2018/05/image1.pngimage1https://blog.trailofbits.com/2018/05/28/collect-ntfs-forensic-information-with-osquery/2018-05-25T20:28:31Zhttps://blog.trailofbits.com/wp-content/uploads/2018/05/image2.pngimage2https://blog.trailofbits.com/2018/05/28/collect-ntfs-forensic-information-with-osquery/2018-05-25T20:28:46Zhttps://blog.trailofbits.com/wp-content/uploads/2018/05/image3.pngimage3https://blog.trailofbits.com/2018/05/30/manage-your-fleets-firewalls-with-osquery/2018-05-30T14:53:31Zhttps://blog.trailofbits.com/wp-content/uploads/2018/05/image21.pngimage2https://blog.trailofbits.com/2018/05/30/manage-your-fleets-firewalls-with-osquery/2018-05-30T14:53:38Zhttps://blog.trailofbits.com/wp-content/uploads/2018/05/image11.pngimage1https://blog.trailofbits.com/2018/06/08/querycon-2018-our-talks-and-takeaways/2018-06-08T12:35:32Zhttps://blog.trailofbits.com/wp-content/uploads/2018/06/image2-e1528461320901.pngimage2https://blog.trailofbits.com/2018/06/08/querycon-2018-our-talks-and-takeaways/2018-06-08T01:22:38Zhttps://blog.trailofbits.com/wp-content/uploads/2018/06/image1.pngimage1https://blog.trailofbits.com/2018/06/08/querycon-2018-our-talks-and-takeaways/2018-06-08T01:23:00Zhttps://blog.trailofbits.com/wp-content/uploads/2018/06/image3.pngimage3https://blog.trailofbits.com/truck-1/2018-06-28T18:33:46Zhttps://blog.trailofbits.com/wp-content/uploads/2018/06/truck-1.jpgTruck-1https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:04:45Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image2.pngimage2https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:05:20Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image4.pngimage4https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:05:44Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image3.pngimage3https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:06:05Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image5.pngimage5https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:06:21Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image1.pngimage1https://blog.trailofbits.com/2018/07/06/optimizing-lifted-bitcode-with-dead-store-elimination/2018-07-06T04:28:29Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/screen-shot-2018-07-06-at-12-28-07-am.pngScreen Shot 2018-07-06 at 12.28.07 AMhttps://blog.trailofbits.com/2018/08/01/bluetooth-invalid-curve-points/2018-07-31T22:07:08Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image21.pngFig. 1: An elliptic curve (as used in cryptography)https://blog.trailofbits.com/2018/08/01/bluetooth-invalid-curve-points/2018-07-31T22:07:46Zhttps://blog.trailofbits.com/wp-content/uploads/2018/07/image11.pngFig. 2: Addition, and the point at infinity (note: these illustrations use a continuous curve for visualization, but that’s still not what we’re working with)https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T03:00:33Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image25.pngimage25Figure 1. Bit flip results for toy programhttps://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T03:01:01Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image24.pngimage24Figure 2. Bit flip results for mbed TLShttps://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:48:34Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image241.pngimage24https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:48:36Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image27.pngimage27https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:48:38Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image28.pngimage28https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:48:40Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image29.pngimage29https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:56:39Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image1.jpegimage1https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:56:42Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image2.pngimage2https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T15:56:43Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image3.pngimage3https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:11:51Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image1.pngimage1https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:11:53Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image21.pngimage2https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:11:55Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image31.pngimage3https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:12:47Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image11.pngimage1https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:26:20Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image12.pngimage1https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:26:22Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image22.pngimage2https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/2018-08-14T16:27:31Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/image32.pngimage3Fig. 5: Excerpt from GDB script called from Python code to induce faults in mbed TLShttps://blog.trailofbits.com/security-descriptor-diagram-1/2018-08-21T14:40:43Zhttps://blog.trailofbits.com/wp-content/uploads/2018/08/security-descriptor-diagram-1.pngSecurity Descriptor Diagram (1)https://blog.trailofbits.com/2018/09/06/rattle-an-ethereum-evm-binary-analysis-framework/2018-09-05T07:52:26Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image1.pngimage1Figure 1: asdfhttps://blog.trailofbits.com/2018/09/06/rattle-an-ethereum-evm-binary-analysis-framework/2018-09-05T07:53:02Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image2.pngimage2Figure 2: asdfhttps://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:57:42Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure1.pngfigure1Figure 1: High-level overview of the data separation upgrade patternhttps://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:54:54Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure4.pngfigure4Figure 4: https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:55:19Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure5.pngfigure5Figure 5: Upgrade by deploying a new logic contract and forwarding calls to it from the old onehttps://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:55:37Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure6.pngfigure6Figure 6:https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:59:03Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure7.pngfigure7Figure 7: https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T08:59:42Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure9.pngfigure9Figure 9: https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T09:00:22Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure11.pngfigure11Figure 11: https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/2018-09-05T09:00:46Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/figure12.pngfigure12Figure 12:https://blog.trailofbits.com/2018/09/10/protecting-software-against-exploitation-with-darpas-cfar/2018-09-06T23:30:50Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image4.pngimage4https://blog.trailofbits.com/2018/09/10/protecting-software-against-exploitation-with-darpas-cfar/2018-09-07T00:13:31Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image3.pngimage3https://blog.trailofbits.com/2018/09/10/protecting-software-against-exploitation-with-darpas-cfar/2018-09-07T00:13:45Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image11.pngimage1https://blog.trailofbits.com/2018/09/10/protecting-software-against-exploitation-with-darpas-cfar/2018-09-07T00:30:44Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/image21.pngimage2https://blog.trailofbits.com/2018/09/26/effortless-security-feature-detection-with-winchecksec/2018-09-25T21:36:43Zhttps://blog.trailofbits.com/wp-content/uploads/2018/09/unnamed.pngunnamedhttps://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:09:03Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/201308.gif201308https://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:47:12Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/2013081.gif201308https://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:52:12Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/screen-shot-2018-10-18-at-9-52-02-pm.pngScreen Shot 2018-10-18 at 9.52.02 PMhttps://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:54:11Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/screen-shot-2018-10-18-at-9-54-01-pm.pngScreen Shot 2018-10-18 at 9.54.01 PMhttps://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:55:15Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/screen-shot-2018-10-18-at-9-55-07-pm.pngScreen Shot 2018-10-18 at 9.55.07 PMhttps://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T01:59:38Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image1.pngimage1https://blog.trailofbits.com/2018/10/19/slither-a-solidity-static-analysis-framework/2018-10-19T02:04:41Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/screen-shot-2018-10-18-at-10-04-31-pm.pngScreen Shot 2018-10-18 at 10.04.31 PMhttps://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:04:02Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image6.pngimage6https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:04:23Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image2.pngimage2https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:04:40Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image10.pngimage10https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:04:55Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image5.jpgimage5https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:05:45Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image8.pngimage8https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:05:59Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image7.pngimage7https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:06:17Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image3.pngimage3https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:06:37Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image9.pngimage9https://blog.trailofbits.com/2018/10/22/a-guide-to-post-quantum-cryptography/2018-10-22T02:36:54Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/codecogseqn-3.pngCodeCogsEqn (3)https://blog.trailofbits.com/2018/10/26/the-good-the-bad-and-the-weird/2018-10-26T01:04:43Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image1.jpgimage1A weird machine is a snippet of code that will process valid or invalid input in a way that the programmer did not intend.https://blog.trailofbits.com/2018/10/26/the-good-the-bad-and-the-weird/2018-10-26T01:05:22Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image4.pngimage4A vulnerability is used to alter either program execution or data state. Execution after this is either a weird state or a state operating on unintended data.https://blog.trailofbits.com/2018/10/26/the-good-the-bad-and-the-weird/2018-10-26T01:05:48Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image31.pngimage3The execution contract defines areas of the program which are executable (yellow). These have diminished over the years as the contract has tightened.https://blog.trailofbits.com/2018/10/26/the-good-the-bad-and-the-weird/2018-10-26T01:06:13Zhttps://blog.trailofbits.com/wp-content/uploads/2018/10/image21.pngimage2A Hoare triple with imprecisely defined preconditions allows for a “weird” state change to occur. Tightening these preconditions by improving input checks would make these states unattainable.https://blog.trailofbits.com/2018/11/16/trail-of-bits-devcon-iv-recap/2018-11-16T06:08:11Zhttps://blog.trailofbits.com/wp-content/uploads/2018/11/blockchain-autopsies-lightning2.jpgBlockchain-Autopsies-lightning2Filtering deployment mistakes, DoS attacks, and spam to identify suspect self-destructshttps://blog.trailofbits.com/2018/11/27/10-rules-for-the-secure-use-of-cryptocurrency-hardware-wallets/2018-11-27T00:33:43Zhttps://blog.trailofbits.com/wp-content/uploads/2018/11/44917824762_dc1fa21afd_k.jpg44917824762_dc1fa21afd_khttps://blog.trailofbits.com/2018/11/27/10-rules-for-the-secure-use-of-cryptocurrency-hardware-wallets/2018-11-27T00:40:55Zhttps://blog.trailofbits.com/wp-content/uploads/2018/11/img_4723.jpegIMG_4723https://blog.trailofbits.com/2018/11/27/10-rules-for-the-secure-use-of-cryptocurrency-hardware-wallets/2018-11-27T00:41:47Zhttps://blog.trailofbits.com/wp-content/uploads/2018/11/fake-ledger-scam-768x1151-source-reddit.jpgfake-ledger-scam-768x1151 (source Reddit)https://blog.trailofbits.com/2018/11/27/10-rules-for-the-secure-use-of-cryptocurrency-hardware-wallets/2018-11-27T00:49:00Zhttps://blog.trailofbits.com/wp-content/uploads/2018/11/img_4726.jpegIMG_4726https://blog.trailofbits.com/2019/01/02/what-do-la-croix-octonions-and-second-life-have-in-common/2019-01-01T20:12:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/image3.pngimage3https://blog.trailofbits.com/2019/01/02/what-do-la-croix-octonions-and-second-life-have-in-common/2019-01-01T20:13:11Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/image1.pngimage1https://blog.trailofbits.com/2019/01/02/what-do-la-croix-octonions-and-second-life-have-in-common/2019-01-01T20:13:30Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/image2.pngimage2https://blog.trailofbits.com/2019/01/02/what-do-la-croix-octonions-and-second-life-have-in-common/2019-01-01T20:13:47Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/image4.pngimage4https://blog.trailofbits.com/2019/01/14/on-bounties-and-boffins/2019-01-11T15:07:09Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/bugbountydata3.jpgbugbountydata3https://blog.trailofbits.com/2019/01/14/on-bounties-and-boffins/2019-01-11T15:16:35Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/bugbountryplot.jpgbugbountryplothttps://blog.trailofbits.com/2019/01/14/on-bounties-and-boffins/2019-01-11T15:21:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/pestdata.jpgpestdatahttps://blog.trailofbits.com/2019/01/17/how-to-write-a-rootkit-without-really-trying/2019-01-17T01:18:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/db507809-cf5a-4662-bf7a-0219be51b8c1.pngdb507809-cf5a-4662-bf7a-0219be51b8c1https://blog.trailofbits.com/htop/2019-01-17T04:47:05Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/htop.pnghtophttps://blog.trailofbits.com/nms2_185_dsc_0586_chwag/2019-01-18T00:55:30Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/nms2_185_dsc_0586_chwag.jpgnms2_185_dsc_0586_chwaghttps://blog.trailofbits.com/nms2_149_dsc_0491_chwag/2019-01-18T00:55:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/nms2_149_dsc_0491_chwag.jpgnms2_149_dsc_0491_chwaghttps://blog.trailofbits.com/2019/01/21/how-mcsema-handles-c-exceptions/2019-01-19T15:32:14Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/exception-blogpost-2.jpgexception blogpost (2)https://blog.trailofbits.com/2019/01/21/how-mcsema-handles-c-exceptions/2019-01-19T15:33:56Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/exceptionblog.jpgexceptionbloghttps://blog.trailofbits.com/2019/01/21/how-mcsema-handles-c-exceptions/2019-01-20T09:35:13Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/exceptionblog-1.jpgexceptionbloghttps://blog.trailofbits.com/2019/01/25/symbolic-path-merging-in-manticore/2019-01-24T18:52:39Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/screen-shot-2019-01-24-at-1.47.01-pm.pngDSM and SSM vs KLEE coverageDynamic State Merging (DSM) provided more statement coverage than Static State Merging (SSM). Figure from "Efficient state merging in symbolic execution." Kuznetsov et al. 11 Jun. 2012.https://blog.trailofbits.com/2019/01/25/symbolic-path-merging-in-manticore/2019-01-24T18:58:47Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/pasted-image-0.pngMerged CFG AnnotatedMerged CFG Annotatedhttps://blog.trailofbits.com/2019/01/25/symbolic-path-merging-in-manticore/2019-01-24T19:16:35Zhttps://blog.trailofbits.com/wp-content/uploads/2019/01/pasted-image-0-1.pngMerged CFG AnnotatedMerged CFG Annotatedhttps://blog.trailofbits.com/win10calc/2019-03-13T21:49:26Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/win10calc.pngwin10calchttps://blog.trailofbits.com/universalapps/2019-03-13T21:52:29Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/universalapps.pnguniversalappshttps://blog.trailofbits.com/fuzzcrash/2019-03-13T21:59:27Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/fuzzcrash.pngfuzzcrashhttps://blog.trailofbits.com/interestingcrash/2019-03-13T22:00:32Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/interestingcrash.pnginterestingcrashhttps://blog.trailofbits.com/2019/03/25/what-application-developers-need-to-know-about-tls-early-data-0rtt/2019-03-21T05:21:11Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/earlydata.pngearlydatahttps://blog.trailofbits.com/2019/04/01/performing-concolic-execution-on-cryptographic-primitives/2019-04-01T03:38:17Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/pasted-image-0.pngpasted image 0https://blog.trailofbits.com/2019/04/01/performing-concolic-execution-on-cryptographic-primitives/2019-04-01T03:39:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/unnamed.pngunnamedhttps://blog.trailofbits.com/2019/04/01/performing-concolic-execution-on-cryptographic-primitives/2019-04-01T03:40:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/03/pasted-image-0-1.pngpasted image 0 (1)https://blog.trailofbits.com/2019/04/01/performing-concolic-execution-on-cryptographic-primitives/2019-04-01T19:21:30Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/237667.cast_.gif237667.casthttps://blog.trailofbits.com/2019/04/08/user-friendly-fuzzing-with-sienna-locomotive/2019-04-05T03:09:33Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/screen-shot-2019-04-04-at-3.38.04-pm.pngsc-sl0A sample function targeting window for a built-in Windows utilityhttps://blog.trailofbits.com/2019/04/09/announcing-querycon-2019/2019-04-04T23:28:17Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/theforum-e1463704569766.pngTheForum-e1463704569766https://blog.trailofbits.com/2019/04/08/user-friendly-fuzzing-with-sienna-locomotive/2019-04-05T04:52:22Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/dsbuffer.bmp_.pngdsBuffer.bmphttps://blog.trailofbits.com/2019/04/08/user-friendly-fuzzing-with-sienna-locomotive/2019-04-05T05:04:33Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/screen-shot-2019-04-05-at-12.04.17-am-e1554440733273.pngScreen Shot 2019-04-05 at 12.04.17 AMhttps://blog.trailofbits.com/2019/04/18/announcing-the-community-oriented-osquery-fork-osql/2019-04-18T16:11:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/screen-shot-2019-04-18-at-8.56.40-am.pngScreen Shot 2019-04-18 at 8.56.40 AMhttps://blog.trailofbits.com/2019/04/18/announcing-the-community-oriented-osquery-fork-osql/2019-04-18T16:12:28Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/screen-shot-2019-04-18-at-8.58.37-am.pngScreen Shot 2019-04-18 at 8.58.37 AMhttps://blog.trailofbits.com/2019/04/18/announcing-the-community-oriented-osquery-fork-osql/2019-04-18T16:19:11Zhttps://blog.trailofbits.com/wp-content/uploads/2019/04/vscode.pngVSCodehttps://blog.trailofbits.com/2019/05/27/slither-the-leading-static-analyzer-for-smart-contracts/2019-05-25T00:33:55Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image1.pngimage1Fig. 1: How Slither workshttps://blog.trailofbits.com/2019/05/27/slither-the-leading-static-analyzer-for-smart-contracts/2019-05-25T00:34:34Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image2.pngimage2Fig. 3: Slither outperforms the other tools in every categoryhttps://blog.trailofbits.com/2019/05/27/slither-the-leading-static-analyzer-for-smart-contracts/2019-05-25T00:35:19Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/screen-shot-2019-05-24-at-8.35.02-pm.pngScreen Shot 2019-05-24 at 8.35.02 PMFig. 2: An exploitable reentrant contracthttps://blog.trailofbits.com/2019/05/27/slither-the-leading-static-analyzer-for-smart-contracts/2019-05-25T00:50:12Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/screen-shot-2019-05-24-at-8.49.45-pm.pngScreen Shot 2019-05-24 at 8.49.45 PMFig. 2: An exploitable reentrant contracthttps://blog.trailofbits.com/2019/05/31/using-osquery-for-remote-forensics/2019-05-25T01:13:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image3.pngimage3https://blog.trailofbits.com/2019/05/31/using-osquery-for-remote-forensics/2019-05-25T01:14:39Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image2-1.pngimage2https://blog.trailofbits.com/2019/05/31/using-osquery-for-remote-forensics/2019-05-25T01:14:50Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image4.pngimage4https://blog.trailofbits.com/2019/05/31/using-osquery-for-remote-forensics/2019-05-25T01:15:13Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/image1-1.pngimage1https://blog.trailofbits.com/2019/05/30/announcing-automated-reverse-engineering-trainings/2019-05-26T20:27:09Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/automated_re.pngautomated_rehttps://blog.trailofbits.com/2019/05/27/slither-the-leading-static-analyzer-for-smart-contracts/2019-05-27T22:47:44Zhttps://blog.trailofbits.com/wp-content/uploads/2019/05/overview.pngoverview_fixedhttps://blog.trailofbits.com/2019/06/17/leaves-of-hash/2019-06-17T10:51:29Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/69c2a-0yytrdra-6gguhezp.png69c2a-0yytrdra-6gguhezphttps://blog.trailofbits.com/2019/06/20/getting-2fa-right-in-2019/2019-06-19T21:18:09Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/screen-shot-2019-06-19-at-5.17.52-pm.pngScreen Shot 2019-06-19 at 5.17.52 PMhttps://blog.trailofbits.com/2019/06/25/creating-an-llvm-sanitizer-from-hopes-and-dreams/2019-06-24T20:35:08Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/image2.pngimage2High-level relationships between the clang frontend, LLVM IR, compiler-rt, and compiler driverhttps://blog.trailofbits.com/2019/06/25/creating-an-llvm-sanitizer-from-hopes-and-dreams/2019-06-24T20:35:34Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/image5.pngimage5Dataflow of clang types throughout the code-generation processhttps://blog.trailofbits.com/2019/06/25/creating-an-llvm-sanitizer-from-hopes-and-dreams/2019-06-24T20:36:01Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/image3.pngimage3Interactions between the pass manager and driverhttps://blog.trailofbits.com/2019/06/25/creating-an-llvm-sanitizer-from-hopes-and-dreams/2019-06-24T20:36:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/06/image1.pngimage1Interactions between the transformation pass and runtime componentshttps://blog.trailofbits.com/2019/07/02/state/2019-07-01T18:41:19Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/randomx.pngrandomxhttps://blog.trailofbits.com/2019/07/03/avoiding-smart-contract-gridlock-with-slither/2019-07-03T18:52:02Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image1.pnghttps://blog.trailofbits.com/2019/07/08/fuck-rsa/2019-07-07T21:49:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image13.pngimage13https://blog.trailofbits.com/2019/07/08/fuck-rsa/2019-07-07T21:49:49Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image13-1.pngimage13https://blog.trailofbits.com/2019/07/08/fuck-rsa/2019-07-07T21:50:23Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image12.pngimage12Developers have even used e = 1, which doesn’t actually encrypt the plaintexthttps://blog.trailofbits.com/2019/07/08/fuck-rsa/2019-07-07T21:50:58Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image14.jpgimage14https://blog.trailofbits.com/2019/07/12/librabft/2019-07-12T04:22:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image5.pngimage5Figure 1 from the PBFT paper, which calls the three phases of each round “pre-prepare,” “prepare,” and “commit.” The numbers represent network nodes and the arrows represent messages. Note how non-leader nodes 1 and 2 broadcast to all other nodes during the second and third phases.https://blog.trailofbits.com/2019/07/12/librabft/2019-07-12T04:23:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image1-1.pngimage1https://blog.trailofbits.com/2019/07/12/librabft/2019-07-12T04:24:46Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image2.pngimage2HotStuff’s liveness theoremhttps://blog.trailofbits.com/2019/07/12/librabft/2019-07-12T04:25:16Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/image4.pngimage4LibraBFT’s liveness theoremhttps://blog.trailofbits.com/2019/07/12/librabft/2019-07-12T04:30:03Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/state-machine-pdf.pngstate-machine-pdfhttps://blog.trailofbits.com/2019/07/16/trail-of-bits-named-in-forrester-wave-as-a-leader-in-midsize-cybersecurity-consulting-services/2019-07-16T03:28:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/forrester-market-leader.pngforrester-market-leaderhttps://blog.trailofbits.com/2019/07/12/librabft/2019-07-16T13:17:04Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/librabft_liveness-2.pngLibraBFT_livenessLibraBFT's liveness theoremhttps://blog.trailofbits.com/2019/07/16/trail-of-bits-named-in-forrester-wave-as-a-leader-in-midsize-cybersecurity-consulting-services/2019-07-16T14:16:17Zhttps://blog.trailofbits.com/wp-content/uploads/2019/07/2019q2_midsize-cybersecurity-consulting-services_146475-1.png2019Q2_Midsize Cybersecurity Consulting Services_146475 (1)https://blog.trailofbits.com/2019/08/02/crytic-continuous-assurance-for-smart-contracts/2019-08-02T05:58:50Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image2.pngimage2https://blog.trailofbits.com/2019/08/02/crytic-continuous-assurance-for-smart-contracts/2019-08-02T06:00:28Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image1.pngimage1Figure 2: Reports provide detailed information needed to understand and fix issueshttps://blog.trailofbits.com/2019/08/02/crytic-continuous-assurance-for-smart-contracts/2019-08-02T06:02:34Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image3.pngimage3Figure 3: Crytic easily creates GitHub issues for selected reportshttps://blog.trailofbits.com/2019/08/02/crytic-continuous-assurance-for-smart-contracts/2019-08-02T06:03:12Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image4.pngimage4Figure 4: Crytic is fully integrated with GitHub Pull Requestshttps://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T00:56:17Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image10.pngimage10https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T00:56:51Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image6.pngimage6The grey arrows represent application messages encrypted under a symmetric key.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:09:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image10-1.pngimage10https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:09:28Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image6-1.pngimage6The grey arrows represent application messages encrypted under a symmetric key.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:10:08Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image2-1.pngimage2https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:10:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image6-2.pngimage6https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:11:23Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image8.pngimage8https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:11:51Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image5.pngimage5The boxes with red slashes through them represent blank nodes.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:12:23Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image3-1.pngimage3The green circles indicate recently updated nodes.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:12:57Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image7.pngimage7The solid black arrows above indicate public-key encrypted messages. The dashed arrows indicate plaintext messages. The arrows do not indicate who is doing the sending (since that’s all Yolanda). They’re just meant to illustrate where in the tree the values are coming from and whom they’re intended for.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:13:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image9.pngimage9https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:14:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image1-1.pngimage1The green circles still represent the updated nodes. The solid arrows represent the private key of its tail being encrypted under the public key of its head.https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-06T01:14:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image4-1.pngimage4https://blog.trailofbits.com/resf_orig/2019-08-06T13:21:06Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/resf_orig.jpgresfhttps://blog.trailofbits.com/2019/08/09/a-day-in-the-life-of-alessandro-gario-senior-security-engineer/2019-08-06T19:22:56Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/unnamed.jpgunnamedhttps://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-06T23:58:43Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image1-2.pngimage1https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:05:09Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image8.jpgimage8https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:08:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image12.pngimage12https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:09:04Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image9-1.pngimage9https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:09:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image6-3.pngimage6https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:10:48Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image10-2.pngimage10https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:11:11Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image11.pngimage11https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:11:38Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image3-2.pngimage3https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:11:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image7-1.pngimage7https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:12:22Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image5-1.pngimage5https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:12:41Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image4-2.pngimage4https://blog.trailofbits.com/2019/08/07/from-the-depths-of-counterfeit-smartphones/2019-08-07T00:12:53Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/image2-2.pngimage2https://blog.trailofbits.com/2019/08/06/better-encrypted-group-chat/2019-08-08T04:51:03Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/post_remove_tree.pngpost_remove_treehttps://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/2019-08-25T15:35:44Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/binja1.jpgbinja1https://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/2019-08-25T15:39:23Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/binja2.jpgbinja2https://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/2019-08-25T15:56:29Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/binja3.jpgbinja3https://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/2019-08-25T15:59:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/binja4.jpgbinja4https://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T14:56:54Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/screenshot-from-2019-08-09-15-11-26.pngScreenshot from 2019-08-09 15-11-26https://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T15:06:40Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/trent_edit.pngtrent_edithttps://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T15:25:46Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/trent_edits3.pngtrent_edits3https://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T15:41:33Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/inter_alias_nbc.pnginter_alias_nbchttps://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T15:51:15Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/trent_edit2.pngtrent_edit2https://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T15:52:52Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/trent4.pngtrent4https://blog.trailofbits.com/2019/08/30/binary-symbolic-execution-with-klee-native/2019-08-26T16:02:34Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/repro_c.pngrepro_chttps://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T17:44:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi_1.pngaditi_1https://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T17:53:57Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi_2.pngaditi_2https://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T18:43:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi_3.pngaditi_3https://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T18:44:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi_4.pngaditi_4https://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T18:45:10Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi_5.pngaditi_5https://blog.trailofbits.com/2019/09/02/rewriting-functions-in-compiled-binaries/2019-08-26T19:49:44Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/aditi.gifaditihttps://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T01:11:27Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_1.pngalan_1https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T01:14:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_2.pngalan_2https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T01:26:59Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_3.pngalan_3https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T01:28:21Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_4.pngalan_4https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T03:31:45Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_5.jpgalan_5https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/2019-08-27T03:33:40Zhttps://blog.trailofbits.com/wp-content/uploads/2019/08/alan_6.jpgalan_6https://blog.trailofbits.com/2019/10/25/formal-analysis-of-the-cbc-casper-consensus-algorithm-with-tla/2019-09-03T13:42:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/anne_1-1.jpganne_1https://blog.trailofbits.com/2019/10/25/formal-analysis-of-the-cbc-casper-consensus-algorithm-with-tla/2019-09-03T13:57:58Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/anne_2.jpganne_2https://blog.trailofbits.com/2019/10/25/formal-analysis-of-the-cbc-casper-consensus-algorithm-with-tla/2019-09-03T14:02:51Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/anne_3.jpganne_3https://blog.trailofbits.com/2019/10/25/formal-analysis-of-the-cbc-casper-consensus-algorithm-with-tla/2019-09-03T14:09:31Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/anne_4.jpganne_4https://blog.trailofbits.com/2019/10/25/formal-analysis-of-the-cbc-casper-consensus-algorithm-with-tla/2019-09-03T14:17:44Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/codecogseqn-2.jpgCodeCogsEqn (2)https://blog.trailofbits.com/2019/09/11/crypto-2019-takeaways/2019-09-11T05:28:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/image1.pngimage1Comparison of zero-knowledge protocolshttps://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:20:57Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/dsc_6478.jpgDSC_6478https://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:20:58Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/dsc_6480.jpgDSC_6480https://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:21:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/dsc_6013.jpgDSC_6013https://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:21:01Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/oss4119.jpg_OSS4119https://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:21:03Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/dsc_5954.jpgDSC_5954https://blog.trailofbits.com/2019/09/20/querycon-2019-a-turning-point-for-osquery/2019-09-17T21:43:28Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/oss4146.jpg_OSS4146https://blog.trailofbits.com/2019/09/27/tethered-jailbreaks-are-back/2019-09-27T18:33:22Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/screen-shot-2019-09-27-at-12.26.05-pm.pngScreen Shot 2019-09-27 at 12.26.05 PMhttps://blog.trailofbits.com/2019/09/27/tethered-jailbreaks-are-back/2019-09-27T18:37:58Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/screen-shot-2019-09-27-at-1.51.33-pm.pngScreen Shot 2019-09-27 at 1.51.33 PMWhen designing the SEP, Apple’s threat model included “adversarial” situations such as another Boot ROM exploit.https://blog.trailofbits.com/2019/09/27/tethered-jailbreaks-are-back/2019-09-27T18:43:19Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/screen-shot-2019-09-27-at-12.26.05-pm-1.pngScreen Shot 2019-09-27 at 12.26.05 PMhttps://blog.trailofbits.com/2019/09/27/tethered-jailbreaks-are-back/2019-09-27T18:44:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/screen-shot-2019-09-27-at-12.26.05-pm-2.pngScreen Shot 2019-09-27 at 12.26.05 PMhttps://blog.trailofbits.com/2019/09/27/tethered-jailbreaks-are-back/2019-09-27T18:50:05Zhttps://blog.trailofbits.com/wp-content/uploads/2019/09/screen-shot-2019-09-27-at-1.51.33-pm-1.pngScreen Shot 2019-09-27 at 1.51.33 PMWhen designing the SEP, Apple’s threat model included “adversarial” situations such as another Boot ROM exploit.https://blog.trailofbits.com/screen-shot-2019-10-03-at-3-50-21-pm/2019-10-03T19:50:37Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.50.21-pm.pngscreen-shot-2019-10-03-at-3.50.21-pmhttps://blog.trailofbits.com/screen-shot-2019-10-03-at-3-51-14-pm/2019-10-03T19:51:30Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.51.14-pm.pngscreen-shot-2019-10-03-at-3.51.14-pmhttps://blog.trailofbits.com/screen-shot-2019-10-03-at-3-52-37-pm/2019-10-03T19:52:51Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.52.37-pm.pngscreen-shot-2019-10-03-at-3.52.37-pmhttps://blog.trailofbits.com/screen-shot-2019-10-03-at-3-53-36-pm/2019-10-03T19:54:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.53.36-pm.pngscreen-shot-2019-10-03-at-3.53.36-pmhttps://blog.trailofbits.com/screen-shot-2019-10-03-at-3-53-51-pm/2019-10-03T19:54:49Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.53.51-pm.pngscreen-shot-2019-10-03-at-3.53.51-pmhttps://blog.trailofbits.com/screen-shot-2019-10-03-at-3-56-07-pm/2019-10-03T19:58:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-03-at-3.56.07-pm.pngscreen-shot-2019-10-03-at-3.56.07-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-2-47-47-pm/2019-10-23T18:48:09Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-2.47.47-pm.pngscreen-shot-2019-10-23-at-2.47.47-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-2-49-06-pm/2019-10-23T21:10:31Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-2.49.06-pm-e1571865028304.pngscreen-shot-2019-10-23-at-2.49.06-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-2-52-11-pm/2019-10-23T21:15:41Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-2.52.11-pm-e1571865339485.pngscreen-shot-2019-10-23-at-2.52.11-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-12-40-pm/2019-10-23T21:19:18Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.12.40-pm-e1571865556754.pngscreen-shot-2019-10-23-at-3.12.40-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-16-54-pm/2019-10-23T21:24:14Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.16.54-pm-e1571865853659.pngscreen-shot-2019-10-23-at-3.16.54-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-25-12-pm/2019-10-23T21:28:08Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.25.12-pm-e1571866087320.pngscreen-shot-2019-10-23-at-3.25.12-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-26-10-pm/2019-10-23T21:29:41Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.26.10-pm-e1571866179544.pngscreen-shot-2019-10-23-at-3.26.10-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-32-41-pm/2019-10-23T19:32:56Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.32.41-pm.pngscreen-shot-2019-10-23-at-3.32.41-pmhttps://blog.trailofbits.com/screen-shot-2019-10-23-at-3-34-08-pm/2019-10-23T21:33:30Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-3.34.08-pm-e1571866407764.pngscreen-shot-2019-10-23-at-3.34.08-pmhttps://blog.trailofbits.com/2019/10/24/watch-your-language-our-first-vyper-audit/2019-10-23T21:07:12Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-5.07.03-pm.pngScreen Shot 2019-10-23 at 5.07.03 PMhttps://blog.trailofbits.com/2019/10/24/watch-your-language-our-first-vyper-audit/2019-10-23T22:24:58Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-6.24.48-pm.pngScreen Shot 2019-10-23 at 6.24.48 PMhttps://blog.trailofbits.com/2019/10/24/watch-your-language-our-first-vyper-audit/2019-10-23T22:26:52Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-23-at-6.26.41-pm.pngScreen Shot 2019-10-23 at 6.26.41 PMhttps://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/2019-10-29T14:30:05Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-28-at-5.27.09-pm.pngScreen Shot 2019-10-28 at 5.27.09 PMhttps://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/2019-10-29T14:36:52Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/image-2.pngimage (2)https://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/2019-10-29T15:05:15Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/mishegos.pngmishegoshttps://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/2019-10-29T15:10:35Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/untitled.pngUntitledhttps://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/2019-10-29T15:20:54Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-11-at-5.23.54-pm.pngScreen Shot 2019-10-11 at 5.23.54 PMhttps://blog.trailofbits.com/2019/10/30/how-safe-browsing-fails-to-protect-user-privacy/2019-10-29T23:48:44Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/screen-shot-2019-10-29-at-6.19.23-pm.pngScreen Shot 2019-10-29 at 6.19.23 PMhttps://blog.trailofbits.com/2019/10/30/how-safe-browsing-fails-to-protect-user-privacy/2019-10-30T02:06:27Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/safebrowsing_icon.pngSafeBrowsing_Iconhttps://blog.trailofbits.com/2019/11/01/two-new-tools-that-tame-the-treachery-of-files/2019-11-01T02:38:51Zhttps://blog.trailofbits.com/wp-content/uploads/2019/10/test.cast_.giftest.casthttps://blog.trailofbits.com/polytracker_name/2019-11-01T11:43:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/polytracker_name.pngpolytracker_namehttps://blog.trailofbits.com/2019/11/07/attacking-go-vr-ttps/2019-11-06T17:49:24Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/polyfile_name.pngpolyfile_namehttps://blog.trailofbits.com/2019/11/14/introducing-iverify-the-security-toolkit-for-iphone-users/2019-11-14T14:38:36Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/appstore.pngappstorehttps://blog.trailofbits.com/2019/11/27/64-bits-ought-to-be-enough-for-anybody/2019-11-26T07:22:33Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/scalarvector.pngScalarVectorhttps://blog.trailofbits.com/2019/11/27/64-bits-ought-to-be-enough-for-anybody/2019-11-26T07:42:07Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/singlecputhroughput.pngSingleCPUThroughputhttps://blog.trailofbits.com/2019/11/27/64-bits-ought-to-be-enough-for-anybody/2019-11-26T07:42:54Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/multicputhroughput.pngMultiCPUThroughputhttps://blog.trailofbits.com/2019/11/27/64-bits-ought-to-be-enough-for-anybody/2019-11-26T07:44:00Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/nvidiav100.pngNVIDIAV100https://blog.trailofbits.com/2019/11/27/64-bits-ought-to-be-enough-for-anybody/2019-11-26T07:44:31Zhttps://blog.trailofbits.com/wp-content/uploads/2019/11/cpugpugraph.pngCPUGPUGraphhttps://blog.trailofbits.com/2019/12/09/introducing-mainnet360-a-joint-economic-and-security-assessment-with-prysm-group/2019-12-05T21:45:15Zhttps://blog.trailofbits.com/wp-content/uploads/2019/12/mainnet360header.pngmainnet360headerhttps://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T01:23:55Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/ecc.pngecchttps://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T01:24:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-8.23.28-pm.pngScreen Shot 2020-01-15 at 8.23.28 PMhttps://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T03:17:22Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image-6.pngimage (6)https://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T03:20:49Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/cert.pngcerthttps://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T03:21:49Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/carbon-11.pngcarbon (11)https://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T04:24:23Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image-7.pngimage (7)https://blog.trailofbits.com/2020/01/16/exploiting-the-windows-cryptoapi-vulnerability/2020-01-16T04:40:50Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/carbon-12.pngcarbon (12)https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:36Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image1.pngimage1https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:38Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image2.pngimage2https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:40Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image3.pngimage3https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:41Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image4.pngimage4https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:43Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image5.pngimage5https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:45Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image6.pngimage6https://blog.trailofbits.com/2020/01/31/symbolically-executing-webassembly-in-manticore/2020-01-29T23:44:47Zhttps://blog.trailofbits.com/wp-content/uploads/2020/01/image7.pngimage7https://blog.trailofbits.com/2020/03/03/manticore-discovers-the-ens-bug/2020-03-03T19:09:10Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image2.pngimage2https://blog.trailofbits.com/2020/03/03/manticore-discovers-the-ens-bug/2020-03-03T19:09:40Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image1.pngimage1https://blog.trailofbits.com/2020/03/03/manticore-discovers-the-ens-bug/2020-03-03T19:13:36Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/screen-shot-2020-03-03-at-2.13.28-pm.pngScreen Shot 2020-03-03 at 2.13.28 PMhttps://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:14:58Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/screen-shot-2020-01-27-at-3.58.53-pm.pngScreen Shot 2020-01-27 at 3.58.53 PMhttps://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:15:55Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/ntfs0.pngntfs0https://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:16:33Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/ntfs1.pngntfs1https://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:16:45Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/ntfs2.pngntfs2https://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:17:42Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/ntfs3.pngntfs3https://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:18:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/ntfs4.pngntfs4https://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:19:05Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/carbon.pngcarbonhttps://blog.trailofbits.com/2020/03/16/real-time-file-monitoring-on-windows-with-osquery/2020-03-04T21:20:11Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/carbon-2.pngcarbon (2)https://blog.trailofbits.com/2020/03/23/announcing-the-zeek-agent/2020-03-20T07:24:41Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/screen-shot-2020-03-20-at-12.24.03-am.pngScreen Shot 2020-03-20 at 12.24.03 AMhttps://blog.trailofbits.com/2020/03/23/announcing-the-zeek-agent/2020-03-20T07:29:50Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/screen-shot-2020-03-20-at-12.29.04-am.pngScreen Shot 2020-03-20 at 12.29.04 AMhttps://blog.trailofbits.com/2020/03/23/announcing-the-zeek-agent/2020-03-20T07:53:49Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/logo.pnglogohttps://blog.trailofbits.com/2020/03/30/an-echidna-for-all-seasons/2020-03-26T16:18:52Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image5.pngAn assertion failure is discovered in Vera's MakerDAO example.https://blog.trailofbits.com/2020/03/30/an-echidna-for-all-seasons/2020-03-26T16:20:25Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image3.pngimage3https://blog.trailofbits.com/2020/03/30/an-echidna-for-all-seasons/2020-03-26T16:21:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image4.pngimage4https://blog.trailofbits.com/2020/03/30/an-echidna-for-all-seasons/2020-03-26T16:21:37Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image1-1.pngimage1https://blog.trailofbits.com/2020/03/30/an-echidna-for-all-seasons/2020-03-26T16:22:12Zhttps://blog.trailofbits.com/wp-content/uploads/2020/03/image2-1.pngimage2https://blog.trailofbits.com/2020/04/07/announcing-our-first-virtual-empire-hacking/2020-04-07T06:35:43Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/euxxek2xgaiebor.jpegEUXXEK2XgAIeBorhttps://blog.trailofbits.com/2020/04/17/revisiting-2000-cuts-using-binary-ninjas-new-decompiler/2020-04-17T18:30:48Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/asm.pngasmASM (interactive version)https://blog.trailofbits.com/2020/04/17/revisiting-2000-cuts-using-binary-ninjas-new-decompiler/2020-04-17T18:31:07Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/mlil.pngmlilMLIL (interactive version)https://blog.trailofbits.com/2020/04/17/revisiting-2000-cuts-using-binary-ninjas-new-decompiler/2020-04-17T18:30:57Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/llil.pngllilLLIL (interactive version)https://blog.trailofbits.com/2020/04/17/revisiting-2000-cuts-using-binary-ninjas-new-decompiler/2020-04-17T18:31:09Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/hlil.pnghlilHLILhttps://blog.trailofbits.com/2020/04/17/revisiting-2000-cuts-using-binary-ninjas-new-decompiler/2020-04-17T18:31:17Zhttps://blog.trailofbits.com/wp-content/uploads/2020/04/hlil-linear.pnghlil-linearHLIL Linear Viewhttps://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:19:55Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_1.pngissue_1https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:19:58Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_2.pngissue_2https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:20:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_3.pngissue_3https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:20:03Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_4.pngissue_4https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:28:33Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_5.pngissue_5https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:28:38Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_6.pngissue_6https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:28:42Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_7.pngissue_7https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:28:47Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_8.pngissue_8https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/2020-05-14T09:28:50Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/issue_9.pngissue_9https://blog.trailofbits.com/2020/05/21/reinventing-vulnerability-disclosure-using-zero-knowledge-proofs/2020-05-20T22:00:41Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/memory-proof-1.pngMemory Proof (1)https://blog.trailofbits.com/2020/05/21/reinventing-vulnerability-disclosure-using-zero-knowledge-proofs/2020-05-20T22:01:44Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/memory-proof-1-1.pngMemory Proof (1)https://blog.trailofbits.com/2020/05/21/reinventing-vulnerability-disclosure-using-zero-knowledge-proofs/2020-05-20T22:03:52Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/trace-proof-1.pngTrace Proof (1)https://blog.trailofbits.com/2020/05/21/reinventing-vulnerability-disclosure-using-zero-knowledge-proofs/2020-05-20T22:06:29Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/circuits.pngcircuitshttps://blog.trailofbits.com/2020/05/22/emerging-talent-winternship-2020-highlights/2020-05-22T03:02:27Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/image1.pngimage1https://blog.trailofbits.com/2020/05/22/emerging-talent-winternship-2020-highlights/2020-05-22T03:03:11Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/image2.pngimage2https://blog.trailofbits.com/2020/05/22/emerging-talent-winternship-2020-highlights/2020-05-22T03:03:43Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/image3.pngimage3https://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:15:18Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/svcli.pngsvclihttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:20:16Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/authenticode-signeddata.pngauthenticode-signeddatahttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:30:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/win_certificate.png.pngwin_certificate.pnghttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:33:02Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/spc_indirect.pngspc_indirecthttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:35:56Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/spc_indirect_macros.pngspc_indirect_macroshttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:38:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/verify1.pngverify1https://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:39:29Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/verify2.pngverify2https://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:40:51Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/authenticode_digest.pngauthenticode_digesthttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:42:48Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/page_hash_asn1.pngpage_hash_asn1https://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:44:05Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/page_hash.pngpage_hashhttps://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:45:13Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/timestamp_asn1.pngtimestamp_asn1https://blog.trailofbits.com/2020/05/27/verifying-windows-binaries-without-windows/2020-05-26T14:46:32Zhttps://blog.trailofbits.com/wp-content/uploads/2020/05/uthenticode_example.pnguthenticode_examplehttps://blog.trailofbits.com/2020/06/05/breaking-the-solidity-compiler-with-a-fuzzer/2020-06-05T03:29:29Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/issuegraph.pngissuegraphhttps://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-care/2020-06-11T05:01:38Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/screen-shot-2020-04-24-at-4.19.11-pm.pngScreen Shot 2020-04-24 at 4.19.11 PMhttps://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-care/2020-06-11T05:02:04Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/screen-shot-2020-04-25-at-2.32.39-pm.pngScreen Shot 2020-04-25 at 2.32.39 PMhttps://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-care/2020-06-11T05:02:21Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/screen-shot-2020-04-25-at-7.22.01-pm.pngScreen Shot 2020-04-25 at 7.22.01 PMhttps://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-care/2020-06-11T05:02:37Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/screen-shot-2020-04-27-at-9.44.49-pm.pngScreen Shot 2020-04-27 at 9.44.49 PMhttps://blog.trailofbits.com/2020/06/11/ecdsa-handle-with-care/2020-06-11T05:02:52Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/pasted-image-0.pngpasted image 0https://blog.trailofbits.com/2020/06/12/upgradeable-contracts-made-safer-with-crytic/2020-06-12T01:59:28Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/image4.pngimage4https://blog.trailofbits.com/2020/06/12/upgradeable-contracts-made-safer-with-crytic/2020-06-12T01:59:53Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/image2.pngimage2https://blog.trailofbits.com/2020/06/12/upgradeable-contracts-made-safer-with-crytic/2020-06-12T02:00:12Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/image3.pngimage3https://blog.trailofbits.com/2020/06/12/upgradeable-contracts-made-safer-with-crytic/2020-06-12T02:00:35Zhttps://blog.trailofbits.com/wp-content/uploads/2020/06/image1.pngimage1https://blog.trailofbits.com/android-chrome-512x512/2020-07-09T20:03:49Zhttps://blog.trailofbits.com/wp-content/uploads/2020/07/android-chrome-512x512-1.pngandroid-chrome-512x512https://blog.trailofbits.com/cropped-android-chrome-512x512-1-png/2020-07-09T20:03:54Zhttps://blog.trailofbits.com/wp-content/uploads/2020/07/cropped-android-chrome-512x512-1.pngcropped-android-chrome-512x512-1.pnghttps://blog.trailofbits.com/image1-38/2020-08-17T03:36:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/08/image1.pngimage1https://blog.trailofbits.com/image2-33/2020-08-17T03:37:33Zhttps://blog.trailofbits.com/wp-content/uploads/2020/08/image2.pngimage2https://blog.trailofbits.com/2020/08/28/graphtage/2020-08-28T02:19:12Zhttps://blog.trailofbits.com/wp-content/uploads/2020/08/example.pngGraphtage ExampleAn example of Graphtage's outputhttps://blog.trailofbits.com/image1-39/2020-10-08T02:42:10Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image1.pngimage1https://blog.trailofbits.com/image2-34/2020-10-08T02:42:13Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image2.pngimage2https://blog.trailofbits.com/image3-24/2020-10-08T02:42:14Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image3.pngimage3https://blog.trailofbits.com/image4-17/2020-10-08T02:42:14Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image4.pngimage4https://blog.trailofbits.com/image5-12/2020-10-08T02:42:15Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image5.pngimage5https://blog.trailofbits.com/image6-9/2020-10-08T02:42:15Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image6.pngimage6https://blog.trailofbits.com/image1-40/2020-10-08T05:08:13Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/image1-1.pngimage1https://blog.trailofbits.com/gpu-fuzzer-1/2020-10-21T07:24:51Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-1.pngGPU Fuzzer 1https://blog.trailofbits.com/gpu-fuzzer-2/2020-10-21T07:24:53Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-2.pngGPU Fuzzer 2https://blog.trailofbits.com/gpu-fuzzer-3/2020-10-21T07:24:55Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-3.pngGPU Fuzzer 3https://blog.trailofbits.com/gpu-fuzzer-4/2020-10-21T07:24:57Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-4.pngGPU Fuzzer 4https://blog.trailofbits.com/gpu-fuzzer-5/2020-10-21T07:24:57Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-5.pngGPU Fuzzer 5https://blog.trailofbits.com/gpu-fuzzer-6/2020-10-21T07:24:57Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-6.jpgGPU Fuzzer 6https://blog.trailofbits.com/gpu-fuzzer-7/2020-10-21T07:24:58Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-7.pngGPU Fuzzer 7https://blog.trailofbits.com/gpu-fuzzer-8/2020-10-21T07:24:58Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-8.pngGPU Fuzzer 8https://blog.trailofbits.com/gpu-fuzzer-9/2020-10-21T07:24:58Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-9.pngGPU Fuzzer 9https://blog.trailofbits.com/gpu-fuzzer-10/2020-10-21T07:24:59Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-10.jpgGPU Fuzzer 10https://blog.trailofbits.com/gpu-fuzzer-11/2020-10-21T07:25:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-11.pngGPU Fuzzer 11https://blog.trailofbits.com/gpu-fuzzer-12/2020-10-21T07:25:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-12.pngGPU Fuzzer 12https://blog.trailofbits.com/gpu-fuzzer-13/2020-10-21T07:25:00Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-13.pngGPU Fuzzer 13https://blog.trailofbits.com/gpu-fuzzer-14/2020-10-21T07:25:01Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/GPU-Fuzzer-14.jpgGPU Fuzzer 14https://blog.trailofbits.com/ryaneberhardt_ehtalk-m4v/2020-10-21T08:18:44Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/ryaneberhardt_ehtalk_std.original.jpgryaneberhardt_ehtalk_std.originalhttps://blog.trailofbits.com/white-1-exploring-program-behaviors/2020-10-22T15:48:13Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-1-exploring-program-behaviors.pngwhite-1-exploring-program-behaviorshttps://blog.trailofbits.com/white-2-how-fuzzing-works/2020-10-22T15:48:17Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-2-how-fuzzing-works.pngwhite-2-how-fuzzing-workshttps://blog.trailofbits.com/white-3-remill/2020-10-22T15:48:21Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-3-remill.pngwhite-3-remillhttps://blog.trailofbits.com/white-4-memory-management/2020-10-22T15:48:25Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-4-memory-management.pngwhite-4-memory-managementhttps://blog.trailofbits.com/white-5-intrinsics-compilation/2020-10-22T15:48:28Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-5-intrinsics-compilation.pngwhite-5-intrinsics-compilationhttps://blog.trailofbits.com/white-6-not-interleaved-memory/2020-10-22T15:48:32Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-6-not-interleaved-memory.pngwhite-6-not-interleaved-memoryhttps://blog.trailofbits.com/white-7-interleaved/2020-10-22T15:48:36Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-7-interleaved.pngwhite-7-interleavedhttps://blog.trailofbits.com/white-8-synchronous/2020-10-22T15:48:40Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-8-synchronous.pngwhite-8-synchronoushttps://blog.trailofbits.com/white-9-asynchronous/2020-10-22T15:48:43Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/white-9-asynchronous.pngwhite-9-asynchronoushttps://blog.trailofbits.com/asynchronous/2020-10-22T16:07:15Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/asynchronous.pngasynchronoushttps://blog.trailofbits.com/exploring-program-behaviors/2020-10-22T16:07:18Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/exploring-program-behaviors.pngexploring-program-behaviorshttps://blog.trailofbits.com/graphs-001/2020-10-22T16:07:21Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/graphs.001.jpeggraphs.001https://blog.trailofbits.com/graphs-002/2020-10-22T16:07:25Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/graphs.002.jpeggraphs.002https://blog.trailofbits.com/graphs-003/2020-10-22T16:07:28Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/graphs.003.jpeggraphs.003https://blog.trailofbits.com/how-fuzzing-works/2020-10-22T16:07:29Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/how-fuzzing-works.pnghow-fuzzing-workshttps://blog.trailofbits.com/interleaved/2020-10-22T16:07:30Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/interleaved.pnginterleavedhttps://blog.trailofbits.com/intrinsics-compilation/2020-10-22T16:07:30Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/intrinsics-compilation.pngintrinsics-compilationhttps://blog.trailofbits.com/memory-management/2020-10-22T16:07:31Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/memory-management.pngmemory-managementhttps://blog.trailofbits.com/not-interleaved-memory/2020-10-22T16:07:32Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/not-interleaved-memory.pngnot-interleaved-memoryhttps://blog.trailofbits.com/profile-interleaved/2020-10-22T16:07:33Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/profile-interleaved.pngprofile-interleavedhttps://blog.trailofbits.com/profile-master/2020-10-22T16:07:34Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/profile-master.pngprofile-masterhttps://blog.trailofbits.com/remill/2020-10-22T16:07:35Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/remill.pngremillhttps://blog.trailofbits.com/synchronous/2020-10-22T16:07:35Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/synchronous.pngsynchronoushttps://blog.trailofbits.com/slither-simil-process-workflow-3/2020-10-22T19:58:09Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/Slither-simil-Process-Workflow-3.pngSlither-simil Process Workflow-3https://blog.trailofbits.com/vectors-of-slithr-tokens/2020-10-22T19:58:12Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/vectors-of-Slithr-tokens.pngvectors of Slithr tokenshttps://blog.trailofbits.com/vuln-pie-chart/2020-10-22T21:08:21Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/vuln-pie-chart.pngvuln pie charthttps://blog.trailofbits.com/diamond3/2020-10-30T10:56:59Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/diamond3.jpgStorage pointer representation.https://blog.trailofbits.com/diamond2/2020-10-30T10:55:47Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/diamond2.jpgdelegatecall-based upgradeability with multiple implementations.https://blog.trailofbits.com/diamond1/2020-10-30T10:54:56Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/diamond1.jpgdelegatecall-based upgradeability with a single implementationhttps://blog.trailofbits.com/diamond3-2/2020-10-30T17:47:33Zhttps://blog.trailofbits.com/wp-content/uploads/2020/10/diamond3-1.jpgStorage pointer representation.