Recent uploads from trusted cybersecurity YouTube channels, covering threat hunting, malware analysis, and security research.
"There are not that many people that do Android research [...] There is no lack of targets. If people would actually look, there is lots to it. The scope is huge." - This is a conversation with Kristoffer Blasiak about Google's Mobile Vulnerability Rewards Program (VRP).
If you are just getting started with reverse engineering this the place to start. In this tutorial we provide an overview the current setup that we currently run, this is also the same setup used in all of our live streams and tutorials. The full notes for this tutorial are unlocked for everyone on our Patreon including links to all of the tools mentioned
During DEF CON and Black Hat, Google invited me to give a talk about Android hacking to students as part of init.g at the University Nevada, Las Vegas. In this talk I share my "trick" how to get into Android hacking and reverse engineering, which can also be adapted to any other topic.
Self-replicating malware, long abandoned by its operators, continues to contribute significant volume and noise to malware feeds. We investigate this trend, which we refer to as Zombieware! Join us on Patreon for Part 2 where we reverse engineer a popular file infector and write an extractor to recover the infected files!
In this video we will use a hardware attack to bypass TPM-based Bitlocker encryption as used on most Microsoft Windows devices. Errata: - PIN can also be enabled using manage-bde, not just using group policies Questions:
In this OALABS Patreon tutorial we cover the foundations of writing efficient YARA rules and provide some tips that can help speed up your YARA hunting. The full notes for this tutorial are unlocked for everyone on our Patreon
In this OALABS Patreon tutorial we cover the three main use cases for YARA rules and how they apply to both BlueTeam/SOC operations and malware analysis. Fun notes have been unlocked for everyone on our Patreon here
In this OALABS Patreon tutorial we cover the basics of YARA, what is it, how is it used, and how to write your first rule. Full notes have been unlocked on our Patreon here
𝘔𝘦𝘳𝘳𝘺 𝘐𝘋𝘈𝘮𝘢𝘴 𝘢𝘯𝘥 𝘢 𝘏𝘢𝘱𝘱𝘺 𝘉𝘪𝘯𝘫𝘢-𝘠𝘦𝘢𝘳 Join us for our holiday special reverse engineering variety show! - Guess the prompt AI charades - Random RE banter - Suspicious liquids in bottles We've got it all! Merry Christmas everyone we will see you in 2024! ----- OALABS PATREON
Reverse Engineering Delphi is a nightmare ... or it can be if you don't have the right setup! In this clip we cover some easy tips that can help make some of the analysis a bit easier. Full notes with links for tools are available here:
How to identify when a macro is used to encrypt strings in malware... inferring source from disassembly! ----- OALABS PATREON
In this video we explore how to get access to the JTAG interface on the new iPhone 15! Special thanks to aunali1 & h0m3us3r, the Asahi Linux Project and Marc Zyngier!
Apple's proprietary Lightning connector is very well known. But do you know how it works? How is a cable authenticated? What can you do with Lightning? In this video we dive into the details of Apple's Lightning protocol - also known as SDQ and IDBUS! Links:
At DEF CON 30 I talked about a project I've been working on with a couple of friends for the past few month: The Tamarin Cable! An open-source Kanzi Cable. Thanks to DEF CON for having me! Links:
Can TensorFlow learn to control Mario Kart 64 running on a real, physical Nintendo 64? In this video we are going to find out! Starring the Raspberry Pi Pico as a USB to Nintendo 64 adapter! Many many thanks again to Kevin Hughes for this awesome TensorKart project!
Thank you all for supporting my channel! It's been awesome! Links:
On Saturday, I managed to dump the firmware of the newly released Apple AirTags - and in this video I'll show how I did it. I won't share firmware dumps or so, so please don't ask :) Links:
In this video I will show you how I connected the Game Boy Tetris to the internet! Links: