d35ha

Reverse Engineer - Flare, @Google

[Josh Stroschein | The Cyber Yeti @jstrosch]

🎙️ The next episode of Behind the Binary is here! In this episode we wrap up FLARE-On 12. We chat with several challenge authors (including the final challenge), discuss some creative cheating, and look at the impact of AI on the CtF 👇

https://t.co/girv5fPOtI

[Willi Ballenthin @williballenthin]

this is cool: Internet Detector changes the background of your malware analysis VM if you forget to re-enable "host only mode".

https://t.co/l2tZOOIDaY

[nickharbour @nickharbour]

That's a wrap #flareon12 read the official solutions and see the prize here: https://t.co/awP1fjf6W4

[Moritz @m_r_tz]

One day to go! #flareon12 Here's a breakdown of the current registered users and challenge solve counts.

[Google Cloud Security @GoogleCloudSec]

FLARE-VM just got a serious upgrade — new GUI, automated builds, and 288+ tools (with better IDA + Go support).

The latest update brings:
🧰 Revamped installer
⚙️ New Python script for full VM automation
📚 (cont) https://t.co/XNghOyQj7p

[Mandiant (part of Google Cloud) @Mandiant]

⏲️ 1 week out!

Flare-On 12 kicks off next Friday, Sept. 26, at 8 PM EST. It's time to prove your #ReverseEngineering skills in this ultimate annual challenge. 🎮

Catch it live here 👉 https://t.co/3zLpiAuF27

[Mandiant (part of Google Cloud) @Mandiant]

Tick, tock! ⏰ The countdown is on—just 1 month until Flare-On 12 drops!

Test your #ReverseEngineering skills starting Sept 26 at 8PM EST. Don’t miss the annual challenge ➡️ https://t.co/YAvJprvI7D

[Mandiant (part of Google Cloud) @Mandiant]

The 12th Annual Flare-On Challenge kicks off Sept 26 at 8PM EST!

Reverse engineering pros, from Windows to Web3 (with a YARA twist), it's your time to shine. 🏆

Get ready → https://t.co/8O6q9qhgvl

#FlareOn12

[Moritz @m_r_tz]

Check out our #flareon11 challenge solutions at https://t.co/nyc3o9Qi9t

[Moritz @m_r_tz]

Check out the new FLARE-powered podcast 🎧 "Behind the Binary, the podcast that introduces you to the fascinating people, technology, and tools driving the world of reverse engineering." Available on Spotify https://t.co/cO0nsbgIXF and other podcast platforms. Hosted by @jstrosch

[Mandiant (part of Google Cloud) @Mandiant]

The Flare-On Challenge is back for its 11th year! 🔥

This #CTF-style challenge for current and aspiring reverse engineers features puzzles across Windows, Linux, Web3, and even YARA.

Learn more and get ready to compete → https://t.co/qPOjkOSC2J

#Flareon11

[Moritz @m_r_tz]

Over 3000 users registered for #flareon11 in the first five days. Join the fun at https://t.co/S1vPBgVetw - there's 🐸

[d35ha @d35hax]

@0xbahaa Congrates, keep going 🎉❤️❤️

[d35ha @d35hax]

Just decrypted the @elastic security EDR signature database [https://t.co/0Sw8Njo1DH]; including ML models, detection rules, encoded lua scripts, yara rules, exception-lists and block-lists.

[d35ha @d35hax]

@0xbahaa

[d35ha @d35hax]

For shellcode obfuscation, currently I'm refactoring obfusion [https://t.co/bTFC9rgLID] adding support for x64.

[d35ha @d35hax]

Recently, I've decided to refactor my old projects, here is the first one, CallObfuscator [https://t.co/5aUW442xjS], it's an obfuscator used to hide (replace) the PE imports with other imports those are less suspicious (less chance to get flagged by analysts).

[d35ha @d35hax]

The new version features the following:
[+] Fully redesigned (more robust and clean code).
[+] Symbols are resolved by hashes instead of names.
[+] Support for symbols imported by ordinals.
[+] Stealthy shellcode execution.

[Jonas L @jonasLyk]

Have a running exe delete itself while running