Mard

🇰🇷 Half-Drunk Security Researcher

Profile inspired by @offsrambledegg

[prz @przunrlsd]

Ts harddd

[Two Seven One Three @TwoSevenOneT]

🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.

No need to suspend the target process

New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole

#redteam #pentest #antimalware

[Mard @Mardryk]

🐐 Driving in my truck, 🚘 right after a beer. 🍺 Hey, that bump ⛰️ is shaped like a deer. 🦌 DUI? 🚔 How about you die? ☠ I'll go a hundred 💯 miles an hour! 🕐 Little do you know, 🧠 I filled up on gas. ⛽ Imma get your fountain makin' ass. ⛲ Pulverize this fuck 🫠 with my burgentruck. 🛻

[Mard @Mardryk]

@miyabnn amazing art!

[Mard @Mardryk]

@zeyu1337 👽

[マウザー @MouserElecJapan]

参考までに

[Mard @Mardryk]

@hipu_star My dream at 6:59:

[InstLatX64 @InstLatX64]

Great article with #Intel die shots:
- #PantherLake (4P+8E+4LPE, #CougarCove)
- #WildcatLake (2P+4LPE)
- #ClearwaterForest (24c #Darkmont)
- #GraniteRapids (44c #RedwoodCove)
- #SierraForest (152c #Crestmont)
https://t.co/xbMz6P2ogF

[Duncan Ogilvie 🍍 @mrexodia]

As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! 🥳

Details and links below ⬇️

[Longhorn @never_released]

virtio-9p VM escape bug in QEMU: https://t.co/3CIBBy7fA4

Patch at https://t.co/icgSgVQqNd

Reminder to sandbox your VMMs. And concurrency is hard to do right.

[Lukasz Olejnik @lukOlejnik]

Private researcher reported a security vulnerability to Chromium on August 4. The fix went into the public source code but Chrome users never got it due to patching timelines. Two Chinese groups, apparently read that public fix, built an exploit chain from it and started phishing NGOs on September 1 using identical code. Technically an N-day but for anyone actually running Chrome, a zero-day. Here the public patch knowledge worked as an instruction manual. Open source means everyone can read the fix. With AI, some people just operationalise the knowledge faster. https://t.co/1pY3F4qCl9

[starlabs @starlabs_sg]

Our intern Yap Yuan Xi pointed AI at Cisco Smart Software Manager and went to make tea. It found a post-auth RCE in under an hour

He spent days writing the report. Cisco had silently patched it the day after he found it. No CVE, not even a biscuit, at least not that we know of.

[daem0nc0re @daem0nc0re]

I wrote a tool to manipulate token privileges with kernel driver for token privileges investigation.
If you prefer kernel drivers over the kernel debugger, feel free to use them.

https://t.co/d9hVbmbFwA

[Mard @Mardryk]

ayo

[ころころゴロリ @k0mkc]

@0xNemi 🤣

[Mard @Mardryk]

@499_addiction 나이수

[Mard @Mardryk]

@TEIGI_3 🔥🔥New Teigi-sama’s work

[The Math Flow @TheMathFlow]

Solving a Rubik's Cube with graph theory.

[Mard @Mardryk]

@leafttea 오오오오오오

[Mard @Mardryk]

@TEIGI_3 cute

[lcamtuf @lcamtuf]

OK, I just had to write it up: https://t.co/SSGTWrKfFB