Introducing ida-free-mcp
How I used Claude to convert a Python IDA plugin to native C++ — because it sounded like a fun side project. Introduction For reverse engineering, ida-pro-mcp is an excellent IDAPython plugin tha...
0xshlomil
CVE-2019-0539: Remote Code Execution
This post reviews how to achieve a full R/W (Read/Write) primitive which can ultimately lead to a RCE (Remote Code Execution). Originally posted at https://perception-point.io/blog/cve-2019-0539-r...
CVE-2019-0539: Root Cause Analysis
Learn how CVE-2019-0539 was fixed in the Microsoft Edge Chakra Engine update for January 2019 via a Root Cause Analysis (RCA) report. Originally posted at https://perception-point.io/blog/cve-2019...
CVE-2015-5122: Exploitation Using COOP
In this post we discuss advanced code reuse technique “COOP,” which uses an old vulnerability to conform to the theoretical boundaries of CFI. Originally posted at https://perception-point.io/blog...
An Overview of the History of Software Exploitation Techniques & Modern Defenses
Special thanks to my colleague Yochai Greenfeld for collaborating with me on this piece. As with any market where crime is lucrative, cybersecurity will always exist, and the more digital the worl...
The Gödel Proof & the Malware-Detection Spoof
In this post, we take inspiration from Kurt Gödel by looking at the system from an outsider’s point of view to detect malware. Special thanks to my colleague Yochai Greenfeld for collaborating wit...