quarkslab @quarkslab
Securing every bit of your data https://t.co/hqdd8jMkYM https://t.co/GOXPtukIXE quarkslab.com Paris, France Joined October 2011-
Tweets2K
-
Followers12K
-
Following13
-
Likes597
BOLT is a static analysis tool, part of LLVM compiler infrastructure, used to verify that compiler security hardening options have been applied on a binary. Thanks to @OSTIFofficial we've worked since November 2025 to improve it. Check our progress here: blog.quarkslab.com/extending-llvm…
From prompt 😃to pwned 😢: Implementing an LLM in your org? Useful. Trusting its output? That's how a low-priv user became admin. Ship the feature, don't extend it your trust. blog.quarkslab.com/from-prompt-to…
Practical Android Software Protection in the Wild: An Appetizer In which @Farenain analyzes 2.5 million Android apps to identify and classify the obfuscators, packers and code protectors they use: blog.quarkslab.com/practical-andr…
What happens when reverse engineers spend weeks digging into a Scala 3 codebase? 🔍 From code review to fuzzing, our assessment helped strengthen Scala's security . The results of our audit, conducted in collaboration with @OSTIFofficial, are here: blog.quarkslab.com/scala-security…
Did you hear about Optical Line Terminals? ISPs rely on them to build their service networks, but what if they're vulnerable? Here @Coiffeur0x90 shows how attackers could compromise entire ISPs by exploiting them and cloud-based fleet management software blog.quarkslab.com/how-olts-may-h…
A hands-on look at Microsoft’s Independent Guest Virtual Machine (IGVM) format inside OpenHCL’s `openhcl.bin`. We unpack the fixed header, variable headers, data layout, and how IGVM measurement supports Confidential Computing with SEV-SNP and TDX. 🔗blog.quarkslab.com/the-igvm-file-…
Paramiko is a pure-Python implementation of SSHv2. Recently, we worked with the Paramiko team on a security audit sponsored by @OSTIFofficial 🙏 Read a summary of our findings and find the full report here: blog.quarkslab.com/paramiko-secur…
My new blog post is released. It explains in detail how applications (App Registrations, Service Principals, MI) and their permissions really work, why they can introduce several subtle paths for privilege escalation, and presents my open-source tool designed to uncover them.
Do you know how Entra ID applications work? What about the security mess they can bring and what they can quietly break? New blog post on Entra ID application permissions, the audit nightmare they create, and QAZPT, our OSS tool built to make sense of it: blog.quarkslab.com/auditing-appli…
Do you know how Entra ID applications work? What about the security mess they can bring and what they can quietly break? New blog post on Entra ID application permissions, the audit nightmare they create, and QAZPT, our OSS tool built to make sense of it: blog.quarkslab.com/auditing-appli…
Obfuscation vs The Optimizer: A Battle in LLVM Middle End. @yates82 shows us how the continuous improvement of the LLVM optimizer defeats naive code obfuscation, and how the obfuscator can fight back. An eternal fight in which all victories are ephemeral blog.quarkslab.com/obfuscation-vs…
🤔Ever wondered how your favorite tools work under the hood? During our work on SightHouse, we dug into BSIM, Ghidra's Binary function SIMilarity engine. Many tools have been built around it, yet its internals remained undocumented. Until now 👇 blog.quarkslab.com/bsim-explained…
🚗 We traced a car’s life from China to Poland. By analyzing a BYD Telematic Control Unit, Romain Marchand reconstructed its journey and identified a real-world event from GPS logs alone. Embedded forensics + OSINT = real stories hidden in data. 👉 blog.quarkslab.com/tearing-down-a…
Recently @quarkslab published a solution of a CTF using TritonDSE and QBDI where they analyzed a VM protected binary, and I thought "Shit, I want to analyze something too...". And this weekend I did an analysis of another crackme with a custom VM but this time using Triton! 🧵
After @Coiffeur0x90 found 3 LPEs in Intego antivirus for macOS, @kaluche_ had to check the Windows version too. Spoiler: it was vulnerable. Here's the full write up of a symlink attack to achieve Local Privilege Escalation👇 blog.quarkslab.com/milking-the-la…
Tired of reversing the same libc for the 100th time? 👀 Meet SightHouse, our open-source tool that automatically detects third-party library functions in binaries. High-confidence function mapping. Works with any disassembler. By @Mad5quirrel & Sami. 🔗 blog.quarkslab.com/sighthouse-aut…
The dragon has a VM. Of course it does. Our latest blog walks through the analysis of a complex C++ binary hiding behind a virtual machine, themed as a classic RPG fight. QBDI & TritonDSE are your weapons of choice. The dragon doesn't stand a chance. 🐉 blog.quarkslab.com/qbdi-vs-triton…
Rule 1️⃣ : "In WAF we (should not) trust" Your WAF is doing its best. That's just not enough 😮💨 A deep dive into Web Application Firewall bypass techniques, discovering why blocked ⛔ doesn't always mean safe. blog.quarkslab.com/in-waf-we-shou…
"Intego X9: Never trust my updates" Read @Coiffeur0x90's research showing how XPC interprocess communications and the update mechanism of the Intego antivirus for MacOS can be abused for local privilege escalation. blog.quarkslab.com/intego_lpe_mac…
"How does it even work?" The question that keeps hackers' hearts pumping, blood pressure rising, and curiosity growing. This is @virtualabs's reverse engineering journey into a cheap smartwatch that measures at least one of those. blog.quarkslab.com/nerd-life-week…
SPONSOR 📣 Today, we are very happy to announce the @quarkslab Gold level sponsoring 😍 📄 @quarkslab provides to companies Security Audit capabilities, Consulting expertise powered by its cutting edge R&D and Qshield, its comprehensive security suite 1/2
0xor0ne @0xor0ne
91K Followers 508 Following Cybersecurity | Reverse Engineering | Vulnerability Research | Embedded & Silicon Security | My Tweets, My Opinions :)
Brendan Dolan-Gavitt @moyix
33K Followers 6K Following Building offsec agents: https://t.co/G9EtnC2Gl3 PGP https://t.co/3WXr0RfRkv
Hash Miser @H_Miser
9K Followers 1K Following Internet janitor, #CERT #BlueTeam and Whisk(e)y enthusiast "Everything you do is useless ! Enjoy 🍻" [email protected] https://t.co/pBOfukJZJi
Yarden Shafir @yarden_shafir
25K Followers 317 Following A circus artist with a visual studio license
Halvar Flake @halvarflake
45K Followers 3K Following Choose disfavour where obedience does not bring honour. I do math. And was once asked by R. Morris Sr. : "For whom?" @[email protected]
Alex Plaskett @alexjplaskett
14K Followers 585 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Richard Johnson @richinseattle
19K Followers 3K Following Computer Security, Reverse Engineering, and Fuzzing; Training & Publications @ https://t.co/mloVP6rPB7; hacking the planet since 1995; Undercurrents BOFH
Maddie Stone @maddiestone
62K Followers 796 Following Security Researcher. Previously Google Project Zero and TAG | 0days all day. Love all things bytes, assembly, and glitter. she/her.
Alex Ionescu @aionescu
47K Followers 2K Following Chief Technical Innovation Officer @crowdstrike. Windows Internals author and trainer. He/Him. RTs are not endorsements, opinions are my own.
Mobile Security @mobilesecurity_
31K Followers 1K Following Mobile Security ✌🏻 #MobileSecurity #AndroidSecurity #iOSsecurity
Romain THOMAS @rh0main
4K Followers 944 Following No longer here. https://t.co/7pANImx70w https://t.co/uhAhqoJWhH https://t.co/9MSpkLkKPz
Samuel Groß @5aelo
25K Followers 524 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
x0rz @x0rz
95K Followers 417 Following Cybersecurity & Threat Intelligence. Knowledge is power, France is bacon 🥓
Travis Goodspeed @travisgoodspeed
26K Followers 4K Following Merchant of Dead Trees and Licensed Proselytizer of the Gospel of the Weird Machines with Pwnage, PoC, and Secular Rock.
Thomas Roccia 🤘 @fr0gger_
35K Followers 2K Following AI Security x Threat Intel · Threat Researcher · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @Microsoft @McAfee_Labs
Nicolas Grégoire @Agarri_FR
28K Followers 628 Following Web hacker and Burp Suite Pro trainer Refer to https://t.co/D5tRH7U2hg for trainings Follow @MasteringBurp for free tips and tricks
Léαlinux 🐧 @lea_linux
14K Followers 562 Following Association loi 1901 depuis 1998 sur les logiciels libres. ☁️: bluesky: @lealinux.org 🐘: [email protected] 📩: bureau@ (Pas de support technique en DM)
Alex Matrosov @matrosov
20K Followers 2K Following Security REsearch @Anthropicai · Breaking & Fixing AI Failure Modes | Founder @binarly_io · @SBOM_Tools · @REhints | Author “Rootkits & Bootkits" (https://t.co/1wd2dfYHY6)
Simone Margaritelli @evilsocket
48K Followers 2K Following Music, cybersecurity, open source and AI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things. Chief Architect @ 🥷
b33f | 🇺🇦✊ @FuzzySec
33K Followers 1K Following 意志 / mobile research @ ▓▓▓▓▓ / Team 501 / ex IBM Capability Lead & FireEye TORE / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs
Kelvin Tan @1KelvinTan
2 Followers 82 Following
ubqtos @ubqtos_io
28 Followers 964 Following next-frontier technologies + global knowledge systems + trust infrastructures. finally, service marketplaces where everyone prospers.
Marko Mladenovic @marko_bugdigger
0 Followers 239 Following Software Engineering; Reverse Engineering; Game Security; AI; Windows OS Internals
Marc Espie @espie_openbsd
2K Followers 246 Following
David @etoga53
9 Followers 421 Following
ponsix2 @TrnQuc99220365
0 Followers 13 Following
getfucked @GetFukct
0 Followers 156 Following
just-another-joker @just_nthr_joker
4 Followers 150 Following
dosmic @pkngrsq
2 Followers 392 Following
Freddy @Freddycrur
29 Followers 118 Following
xxxx @hello_kugou
2 Followers 95 Following
zoharbuber @zoharbuber
28 Followers 2K Following
Horácio Filho @hjcfilho
125 Followers 3K Following
𝒜𝓇𝒾𝑒𝓈�... @ariesdevil77
702 Followers 1K Following ex-database kernel engineer @DatabendLabs and @OceanBaseDB
MuRo @M_Sumaraq
112 Followers 3K Following
Kerrie Rayman, CISSP @HITKerrie
290 Followers 2K Following Certified security professional @Qualys. Ask me how to de-risk your business. #DeriskyBusiness #ExposureManagement
Horus @0xHorusSec
2 Followers 113 Following
Ahmed M.Abd El-latif @The_Pwnish3r
581 Followers 1K Following Vulnerability Researcher | Opinions are my own.
Yuran Pereira ✩ @yuran_mp
65 Followers 1K Following Low level and Linux kernel security hobyist. Software hypnotist
Eugenio @Eugenio25332532
14 Followers 233 Following
Amit Moshel @MoshelAmit
3 Followers 172 Following
karkar @0x0ed
2 Followers 133 Following
Ramesh G @RameshG54785237
70 Followers 219 Following Techie 🏍️ Blood Group: AB +ve Lives in Bengaluru
Young Purr🇮🇷 @Iced_Paw
24 Followers 182 Following Child of persia. Possessed by Mobile security, Hellcat and orange cats *** Stack Smashing Detected *** Segmentation fault
VMunProtect @vmdeprotect
1 Followers 125 Following
SUNNYWANG @SUNNY88SWANG
0 Followers 20 Following
eversinc33 🤍🔪�... @eversinc33
7K Followers 1K Following reversing/deobfuscation/drivers @ https://t.co/64HAro8Scw
Manav Jain @manav_jain
64 Followers 1K Following Cybersecurity Researcher @KhouryCollege @Northeastern | Tinkerer @SecureAccesTech
CyberX @CyberXlx9q
108 Followers 671 Following 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗡𝗲𝘄𝘀 | 𝗗𝗮𝘁𝗮 𝗟𝗲𝗮𝗸𝘀 | 𝗥𝗮𝗻𝘀𝗼𝗺𝘄𝗮𝗿𝗲 | 𝗗𝗮𝗿𝗸 𝗪𝗲𝗯 Tracking breaches, threats & underground intel
C3L14 @0xCAFEDEADBEEF
1 Followers 35 Following
cr3ghost @cr3ghost
1K Followers 296 Following A student passionate about reverse engineering, windows internals, anti-cheat research, malware research, and exploit research. Aspiring red teamer.
Ewerton Queiroz @0x9045
946 Followers 2K Following A cada 10 brasileiros, metade são 5. ~ Amargo por causa do açúcar ~
ethernal sadness @SadnessEthernal
2 Followers 54 Following
jfkk @jfkkkfc
0 Followers 56 Following
Daniel Petitjean @DanielPeti5578
0 Followers 669 Following
Boyd Fields @boydfields
41 Followers 1K Following Tech superhero 🦸♂️ Solving problems and making magic happen 💻️ 20+ years in IT management, and still having fun! 💪️ #ITManagement | #ManagedServiceProvider
Ihor @ihor____1
22 Followers 37 Following
curiouspocket @curiouspocket
0 Followers 464 Following
ANSSI @ANSSI_FR
84K Followers 54 Following Compte officiel de l'Agence nationale de la sécurité des systèmes d'information (ANSSI) | Retrouvez les alertes de #cybersécurité sur le compte @CERT_FR
OSSIR France @OSSIRFrance
8K Followers 6 Following Observatoire de la Sécurité des Systèmes d'Information. site : https://t.co/ptVsUOIzep. Egalement sur @[email protected].
CERT-FR @CERT_FR
58K Followers 40 Following Centre gouvernemental de veille, d'alerte et de réponse aux attaques informatiques. Pour toute question : [email protected] ou par téléphone au 3218 @ANSSI_FR
CERT-EU @CERTEU
14K Followers 434 Following Official account of the CERT for the EU institutions, bodies and agencies. Please use [email protected] for interaction.
Tom Mansion @philipp0x90
47 Followers 45 Following
Jimi Sebree @DinoBytes
145 Followers 457 Following I find mediocre bugs and write about them sometimes.
hardwear.io @hardwear_io
10K Followers 500 Following #HardwareSecurity Training & Conference Upcoming Conference & Training #hw_ioUSA2026
embedded world @embedded_world
10K Followers 1K Following embedded world Exhibition&Conference – the world’s biggest gathering of embedded experts
Campus Cyber @CampusCyberFr
7K Followers 458 Following Ensemble, au service d’une grande nation cyber 🇫🇷🇪🇺
European Cyber Cup @EuCyberCup
2K Followers 766 Following European Cyber Cup 🏆 | 1ère compétition d'eSport dédiée au hacking éthique, pendant le Forum INCYBER @INCYBER_Eu | 📅 9-11 mars 2027
Laurent @zargoun
51 Followers 51 Following Security researcher at @quarkslab / Amiga demomaker in the 90' / Bass player when not on a keyboard
lief-project @LIEF_project
2K Followers 1 Following Official Twitter account for LIEF - https://t.co/wVwUSWbGjy Discord: https://t.co/UUUIrtZIbs
The Triton library @qb_triton
2K Followers 1 Following A dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.You might like
