Jean-Pierre LESUEUR

[Jean-Pierre LESUEUR @DarkCoderSc]

@Dimillian Man! That's a wild relic. We were such skids back then haha ! The TPB wallpaper... priceless 🤣

[Jean-Pierre LESUEUR @DarkCoderSc]

@fr0gger_ 😂

[Jean-Pierre LESUEUR @DarkCoderSc]

🚀You can now search for malware families, releases, techniques, and code snippets, including archives on Malware Gallery: https://t.co/GxON85HUXh

#InfoSec #Malware #DFIR

[Jean-Pierre LESUEUR @DarkCoderSc]

@rmcdaniel_ People copying nicknames is just a sign of how inspiring someone is. It can surely cause trouble, but I believe it is the highest form of flattery.

[Jean-Pierre LESUEUR @DarkCoderSc]

@rmcdaniel_ Because, you are a true legend! Many people, especially younger generations, are unaware that you are a pioneer in infosec and malware research. Numerous concepts they now take for granted were pushed to light by innovators like you in the late 1990s and 2000s.

[Jean-Pierre LESUEUR @DarkCoderSc]

@rmcdaniel_ I would even say that you were among the very few "countable on one hand" who were most impactful at that time. You inspired so many young developers, including myself.

[Jean-Pierre LESUEUR @DarkCoderSc]

@0bin_Cyber @fr0gger_ Contact me via email ;)

[Jean-Pierre LESUEUR @DarkCoderSc]

@JoelGMSec My gif wasn’t explicit m, no worries 😉

[Jean-Pierre LESUEUR @DarkCoderSc]

Has anyone ever seen or used this evasion technique? I have been using it for many years and still find it effective (particularly with macro's), so I was surprised to see it continue to work so I decided to document it on Unprotect : https://t.co/wfKDvwyBPm Feedback appreciated!

[Jean-Pierre LESUEUR @DarkCoderSc]

@JoelGMSec IMO it is, if it can strengthen defense, then it aligns perfectly with the goal of our project

[Jean-Pierre LESUEUR @DarkCoderSc]

@JoelGMSec We may not be talking about the same thing. I'm not referring to PowerShell for executing payloads; rather, I'm describing an indirect memory write technique.

[Jean-Pierre LESUEUR @DarkCoderSc]

New code snippet added that demonstrates the principle of indirectly copying a buffer to another memory region using the Windows APIs ReadProcessMemory (Example 1) or ReadFile (Example 2): https://t.co/ymhAUCbnB8

[Jean-Pierre LESUEUR @DarkCoderSc]

cf : @fr0gger_

[Jean-Pierre LESUEUR @DarkCoderSc]

@degendev__ @Hackercharr @PerkinsFund @GetLensNow Oui 😎

[Jean-Pierre LESUEUR @DarkCoderSc]

@degendev__ @Semtioc @PerkinsFund @GetLensNow More exactly Delphi/Lazarus for the Server, MASM for the loader. The loader then loads pieces of shellcodes per feature (a technique called Func-In at that time)

[Jean-Pierre LESUEUR @DarkCoderSc]

@degendev__ @Hackercharr @PerkinsFund @GetLensNow Ohhh ! I remember Digerati 🤩

[Jean-Pierre LESUEUR @DarkCoderSc]

@vxunderground

[Jean-Pierre LESUEUR @DarkCoderSc]

@vxunderground 😞