Pinned post
Ever wanted to get payload from packed android malware without running android emulator/device? Me neither. But I wrote a tool for that anyway😄
github.com/eybisi/kavanoz
github.com/eybisi/kavanoz
Latest posts 5
When Your IDE Becomes a RCE Endpoint
Your IDE is basically one launch away from running someone else's code.
If your devs use Cursor, Windsurf, or any VS Code fork, the extensions they think they trust can quietly point to code nobody legitimate owns. We've been digging into this for a month and it's bad.
So, as the CSOC and AppSec teams, we compared every extension on both registries (129K on Microsoft's Marketplace vs 14K on OpenVSX).
🔓 104,456 with no entry on OpenVSX at all, every one a free namespace someone can grab (open for supply chain attacks)
👤 1,078 resolving to a different publisher
🎯 126 straight-up ID hijacks, including sumneko.lua and rust-lang.rust
Wrote the whole thing up 👇:View quoted post on X
Wake up babe, new mba simplifier just dropped github.com/trailofbits/Co…
github.com GitHub - trailofbits/CoBRA: Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arit... Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation - trailofbits/CoBRA Inspired by JEB, I forked Simplify’s smalivm to perform concrete execution for string decryption and automatic unpacking. The results look promising. Combined with Unidbg for native emulation, this will eventually become a Jadx plugin.
