107 Photos and videos
I figured out a generic way to generate those polyglots!
Introducing: bppb!
github.com/theXappy/bppb
This PoC takes 2 files, a bplist and a protobuf, and merges them into one unholy abomination.
#bplist #protobuf #polyglot #dfir #digitalforensics
Annoyingly, I created a bplist-protobuf polyglot.
This one is a valid protobuf containing 2 LengthValues in an array.
As a bplist, it's a dictionary with 2 Key-Value-Pairs.
Hex here: pastebin.com/d4Vva8aV
#DFIR #MobileForensics #DigitalForensics
2
14
2,098
Xappy retweeted
May 30
Vendors
Added:
GL.iNet
Hikvision
Dahua
Not all of them encrypt, but nice to have.
tpbreak.afflicted.sh
4
66
287
22,737
Xappy retweeted
May 29
IRIS (Intent Runtime Inspection System) is my attempt at building a Burp Suite for Android intents :) . Give it a spin and let me know what breaks, what’s missing, and what you’d like to see next: github.com/Ch0pin/iris
Demo here: youtube.com/watch?v=uU-f2zVZ…
1
10
35
2,105
This repo by @atc1441 was helpful
github.com/atc1441/Bluetrum_…
34
💡Understand how ROP can be used to bypass security defenses and execute code on ARM64 devices in Part 3 of our ARM64 Reversing and Exploitation Series: 8ksec.io/arm64-reversing-and…
📥Want to strengthen your ARM64 exploitation skills? Check out our free ARM64 challenges: academy.8ksec.io/course/arm-…
#Reversing #ReturnOrientedProgramming #CyberSecurity
41
197
8,644
Xappy retweeted
10 Nov 2025
I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🪲
Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA:
github.com/diversenok/DiaSym…
ALT A screenshot of DiaSymbolView inspecting combase.pdb
3
57
187
15,161
Xappy retweeted
24 Oct 2025
2
3
38
6,984
Hoping for a WhatsApp 0-click RCE so I can retract its demo myself 🤞
24 Oct 2025
if you retweet this you'll find a zero day in 24 hours
(trust me this spell works)
1
3
572
Xappy retweeted
18 Oct 2025
Binary Golf Grand Prix 6 begins now!
#BGGP6 theme: "Recycle"
ALT BGGP6 flyer, a collage featuring old media formats arranged over a backdrop of a golf course
4
25
59
28,136
Xappy retweeted
10 Sep 2025
I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)
ALT The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
18
145
1,005
71,646
Xappy retweeted
4 Aug 2025
We have a chat service that works over DNS so you can LLM on a flight without paying
" dig @ch.at "what is golang" TXT short"
53
181
4,511
805,958
Ever wondered what your modem really says to your SIM card?
I sniffed raw APDU traffic off the SIM pins, decoded the UART based on the ATR, and piped it into Wireshark.
Full guide: how to wire it, decode it, and see the bytes for yourself.
🔎💥📶
github.com/theXappy/trace_si…
ALT Pinout of a nano sim card.
ALT A Logical Analyzer connected, via IC clips, to a 3G USB modem stick.
ALT Screenshot of PulseView with some bytes decoded and compared to the output of pysim-shell.
ALT Screenshot if Wireshark showing a "gsm sim" packet sent between a modem and a sim card.
3
75