https://blackwinghq.com/blog/Blackwing Intelligence provides high-end security engineering, analysis, and research services for engineering focused organizationsenTue, 15 Oct 2024 00:00:00 +0000https://blackwinghq.com/blog/posts/finding-vulnerability-variants-at-scale/Tue, 15 Oct 2024 00:00:00 +0000https://blackwinghq.com/blog/posts/finding-vulnerability-variants-at-scale/From a JPEG file-format bug in jpeg-recompress to its variants across Chromium, Electron, WINE and more: a method for finding vulnerability variants at scale.https://blackwinghq.com/blog/posts/playing-with-libmalloc/Tue, 02 Jan 2024 00:00:00 +0000https://blackwinghq.com/blog/posts/playing-with-libmalloc/An introduction to macOS libmalloc in 2024 and heapster, a new tool for exploring the heap, plus a few strange things found along the way.https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/Tue, 21 Nov 2023 00:00:00 +0000https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/How we bypassed Windows Hello fingerprint authentication on three laptops: reverse engineering the sensors, breaking a custom TLS, and defeating Microsoft's SDCP protocol.https://blackwinghq.com/blog/posts/dissecting-cve-2013-1899/Sun, 04 Aug 2013 00:00:00 +0000https://blackwinghq.com/blog/posts/dissecting-cve-2013-1899/Turning PostgreSQL's CVE-2013-1899 command-line-flag injection from a denial of service into remote code execution.