Lab

high school software engineer

[Lab @LabGuy94]

@gerhart_x @_xeroxz What tools did you use?

[Lab @LabGuy94]

@vicnaum @claudeai Made a small related CLI tool that lets you inject custom scripts into the JS runtime. One issue I see though is reidentifying functions across updates. You could probably use semantics for that though.
https://t.co/UNtBSV0iJl

[Lab @LabGuy94]

@frdfzi I never knew I needed this until I saw it

[Lab @LabGuy94]

@belabs_engineer Nah, TPwSav.sys. It's an already known vulnerable driver, but all the POCs I found were just using the single byte physical mem rw when it exposes ZwMapViewOfSection.
https://t.co/vFKVv1Thjo

[Lab @LabGuy94]

Vulnerable driver only returns bottom 32 bits of 64 bit virtual address, ended up brute forcing the top 32 bits

[Back Engineering Labs @BackEngineerLab]

We’re releasing our analysis of https://t.co/cAmTrO7mvx, a major game cheat targeted by multiple studios in recent legal actions. We partially deobfuscated several Themida-protected components and document how it hijacks Hyper-V to inject and manipulate game code.

https://t.co/ykGrHdl6ty
https://t.co/LhEXxeIcnF

[Lab @LabGuy94]

@kanavtwt For a cool 20 grand

[Lab @LabGuy94]

@allthingsida Damn dude this is awesome. I’ve seen libraries that interface with the idb but they’re always language bound, but this via SQL makes it universal.

[Lab @LabGuy94]

@chompie1337 Complaining about a free email service with a focus on privacy because it can't defy the bounds of the email protocol.

[Lab @LabGuy94]

@rjmalagon @OutflankNL The content itself presents nothing of new value. I don’t have issues with AI revision for clarity if the original content has value, but in this case it’s just fluff.

[Lab @LabGuy94]

@Chuck6703880517 I personally don’t spend much time performing code audits, but I would call this win32 semi low level security.

[Lab @LabGuy94]

https://t.co/Rewc1zcUsj
https://t.co/x6snoHZNFT
Released my POC which earned me a 3000$ bug bounty.

[Lab @LabGuy94]

@mkolsek Unfortunately, no CVE ID has been assigned to this vulnerability yet. I am in contact with a Microsoft however, and hope to see one produced from that.

[Lab @LabGuy94]

@Pinus9264 Glad you found it interesting!

[Lab @LabGuy94]

@JosephKanko4 Hope you learned something!