I found some accompanying slides: https://www.troopers.de/downloads/troopers17/TR17_ME11_Static.pdf https://www.troopers.de/downloads/troopers17/TR17_ME11_Stati

I found some accompanying slides: https://www.troopers.de/downloads/troopers17/TR17_ME11_Static.pdf https://www.troopers.de/downloads/troopers17/TR17_ME11_Stati... That said, please note that this is partially outdated information (even to the extent of warranting a mod edit even though it's so recent) - the parts that mention how some compressed modules are unreadable are now irrelevant. The URL for this article is /2017/04/ (April). More recently (July, three months later), this same group has somehow (??) managed to derive the Huffman compression tables for the previously-inaccessible modules: https://github.com/ptresearch/unME11 https://github.com/ptresearch/unME11 I haven't read anything that explicitly states this (on HN; I don't read anywhere else), but I get the impression this is the holy grail, or at least one of the major pieces of the puzzle. I found this random comment about actually using unME11: https://news.ycombinator.com/item?id=15447841 https://news.ycombinator.com/item?id=15447841 This recent HN article suggests that it's also possible to get arbitrary remote code execution, but no details are (yet) forthcoming. https://news.ycombinator.com/item?id=15298833 https://news.ycombinator.com/item?id=15298833