Photo of Cthulu

piotrbania.com

If you are looking for tool to bypass Windows / Mac passwords click here

Twitter: https://twitter.com/PiotrBania/
Github: https://github.com/piotrbania/
Linkedin: https://www.linkedin.com/in/piotrbania
Email: bania.piotr gmail.com
Cell: terminated by Gohan

This website is mostly for corporate purposes and google bot for indexing my stuff correctly.

Some recent CVEs

Pick

CVE-2020-6542, CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043, CVE-2020-5981, CVE-2020-5965, CVE-2019-5684, CVE-2019-5685, CVE-2018-6251, CVE-2019-14574, CVE-2019-5049, CVE-2019-5183, CVE-2018-12152

My software (still maintained)

Project

KON-BOOT (tool for forgotten passwords, allows to bypass Windows and macOS password without knowing and changing the active password)
iREPAIR (tool for iPhone, iPad restore and recovery for Windows)
iFORENSICS (generates informative and detailed forensics reports from iOS backups)

Articles

My computer security ramblings

01/11/2016 - Praktyczna inzynieria wsteczna (Book/Co-author - PWN PL)
07/04/2016 - Exploiting the Apple Graphics Driver and Bypassing KASLR (CISCO TALOS)
31/01/2014 - Hacking and patching TP-LINK TD-W8901G router
01/03/2012 - Securing The Kernel Via Static Binary Rewriting, Program Shepherding and Partial Control Flow Integrity
01/01/2012 - Mitigating ReturnOriented Programming Attacks and Other Exploitation Attempts via Secure API Execution
01/09/2011 - Fast, Reliable and Runtime Protection Method Against Table Index Overflows
10/05/2011 - Securing The Kernel via Static Binary Rewriting and Program Shepherding
06/09/2010 - JIT spraying and mitigations
23/08/2010 - Security Mitigations for Return Oriented Programming Attacks
08/11/2009 - Using MATLAB and Mathcad for solving (mesh current) equations
05/10/2009 - SMB2: 351 Packets from the Trampoline
10/06/2009 - Evading network level emulation
25/05/2009 - Generic Unpacking of Selfmodifying, Aggressive, Packed Binary Programs
18/05/2009 - Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) + SpiderPig Project Page
01/06/2007 - Aslan Metamorphic Engine Corner plus some demos.
01/06/2007 - TI89 Titanium calculator corner plus a plenty of not really useful things.
06/02/2007 - Bypassing the breakpoints with file "streams"
16/10/2005 - Exploiting Windows Device Drivers Whitepaper
15/08/2005 - Playing with RDTSC
04/08/2005 - Windows Syscall Shellcode exclusive for SecurityFocus
02/08/2005 - NT shellcodes prevention demystified published in PHRACK#63
29/06/2005 - Fighting EPO Viruses exclusive for SecurityFocus
25/02/2005 - Antidebugging for (m)asses protecting the env.

Codes and advisories

some old things

22/03/2016 - Exploit for CVE-2016-1743 (Apple Intel HD 3000 Graphics driver OSX 10.11)
01/04/2014 - Zynos ROM-0 config password retriever
01/03/2014 - BYPASSING EMET Export Address Table Access Filtering feature
01/09/2013 - Rootkit Detection Framework for UEFI (parts DARPA CFT project)
16/08/2010 - SMB2 remote exploit for Vista SP1/SP2 + HACKTRO
16/09/2009 - VMware CloudBurst VMware Guest to Host Escape Exploit + HACKTRO
15/07/2008 - KonBoot ultimate password utility *Windows and Mac*
20/03/2008 - Nid4Spid GAME for ST7 Microcontrollers
25/10/2007 - Aslan Metamorphic Engine Corner
31/01/2006 - DISIT OPEN SOURCE DISASSEMBLER ENGINE released.
11/11/2005 - Utility: KiServiceTable address finder by xrefs scanning.
22/09/2005 - Protty v.01A (beta) shellcode execution protection library for Windows NT based systems
03/09/2005 - Debugger "OnAttach" detection method TWO
01/09/2005 - TAPION Polymorphic Decryptor Generator
24/08/2005 - Debugger "OnAttach" detection method
16/08/2005 - Simple RDA (RANDOM DECRYPTION ALGORITHM) example
14/08/2005 - Efilter automatic exception reporting utility
14/08/2005 - Antid Anti IsDebuggerPresent debugger detection library
08/08/2005 - Badf00d Polymorphic Engine
04/08/2005 - Windows XP SP1 syscall shellcode (POC) full sources of shellcode described on SecurityFocus.
02/08/2005 - Protty library Windows NT buffer overflow protection library (proof of concept / prototype)
29/06/2005 - EPOS heuristic virus scanner
25/02/2005 - Finddll.c searches are running processes for module occurrency.

References

Available on request