Mathias Payer
where else to find them
mastodon:@gannimo@infosec.exchange
x:gannimo
what they talk about
all 7 in the filters
where they keep going back
no series more than once — all 9 in the filters
on a stage with
all 45 in the filters
who talks about the same things
nobody close enough yet
| title | conference | date |
|---|---|---|
| Exploiting Android Apps with Counterfeit Art | 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26) | 2026-08-10 |
Demonstrates turning arbitrary file-overwrite into persistent code execution by replacing an app’s ART image; builds two exploits: a local ASLR-leak chain that… | ||
| FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels | 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26) | 2026-08-10 |
FuzzBT builds a fuzzer that iterates over kernel Bluetooth configurations and extracts configuration-aware seeds via concolic/symbolic execution, instruments… | ||
| Squeezing Juicy Variant Bugs Out of Modern Browsers | 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26) | 2026-08-10 |
GRAPE is a ruleable variant analysis pipeline that models bugs with four elements context, assumption, violation, end use and uses pattern rules to scan large… | ||
| Gradient: Gradual Compartmentalization via Object Capabilities Tracked in Types | OOPSLA 2024 | 2024-10-20 |
Proposal implements a Scala extension called Gradient that lets legacy code be migrated incrementally to an object-capability model by combining runtime… | ||
| Exploiting Android’s Hardened Memory Allocator | WOOT '24 | 2024-08-12 |
Scudo is the default native heap on Android since Android 11 and the paper shows two concrete exploitation techniques that trick Scudo into allocating a chunk… | ||
| Monarch: A Fuzzing Framework for Distributed File Systems | USENIX ATC 2024 | 2024-07-10 |
MONARCH builds a push-button fuzzer that tests POSIX DFSes across VMs with deterministic fault injection at syscall granularity, unified cross-node coverage… | ||
| BLESA: Spoofing Attacks against Reconnections in Bluetooth Low Energy | WOOT '20 | 2020-08-11 |
Formal analysis finds two BLE reconnection design flaws that let an attacker impersonate a previously paired device and inject spoofed data. The authors build… | ||
| FuZZan: Efficient Sanitizer Metadata Design for Fuzzing | USENIX ATC '20 | 2020-07-15 |
FuZZan replaces ASan’s heavy shadow memory with two compact metadata layouts (mean-shadow and arbitrary metadata), adds a runtime dynamic metadata switching… | ||
| ACES: Automatic Compartments for Embedded Systems | USENIX Security '18 | 2018-08-15 |
ACES is an LLVM-based compiler that auto-infers compartments for bare‑metal embedded code, uses static analysis plus a micro‑emulator and the MPU to enforce… | ||
| Venerable Variadic Vulnerabilities Vanquished | 26th USENIX Security Symposium (USENIX Security '17) | 2017-08-16 |
A compiler-based sanitizer called HexVASAN records call-site metadata and verifies variadic argument types at runtime via an LLVM compiler pass plus a runtime… | ||
| Silently Breaking ASLR In The Cloud | Black Hat Europe 2015 | 2015-11-10 |
Demonstrates a practical side‑channel that uses memory deduplication (KSM/Page‑fusion) by measuring slow copy‑on‑write times to detect shared pages, then… | ||
| nothing matches | ||