RubberDuck

Programmer, security researcher

[RubberDuck @RubberDuckCz]

What if we took the PE format, broke it down to bytes, and gave it a brand new, interactive face? No boring PDFs. Just pure HTML that breathes. Something is brewing... 🛠️#ReverseEngineering #MalwareAnalysis #WindowsInternals #PEFormat

[RubberDuck @RubberDuckCz]

@Octoberfest73 MinGW-gcc is basically a cheat code for getting flagged on VT for a 10-line app. 💀 Nothing like manually crafting a .rc file via windres just to convince AV engines I'm not a Russian APT group.

[RubberDuck @RubberDuckCz]

@rifteyy Haha, I must have missed that during translation! 🤣 Thanks for pointing it out, and I'm really glad you enjoyed the read!

[RubberDuck @RubberDuckCz]

Second part of the Windows x64 shellcode creation series! TEB → PEB → modules. How to navigate memory without static addresses. #Shellcode #BlueTeam #x64 #SecurityResearch

https://t.co/Eitzbz400I

[RubberDuck @RubberDuckCz]

@5mukx The third part is based on my old portable shellcode. Good old days 😌