pgboy

Binary security researcher

[pgboy @pgboydo]

@thdxr Opencode go/run/fly

[pgboy @pgboydo]

@njcve_ Same today

[pgboy @pgboydo]

@afernandesvigo @AnthropicAI @claudeai me too

[pgboy @pgboydo]

@ZilanQian 感觉不到啥，人都都不给你用。。

[pgboy @pgboydo]

I'm so sad, they did not contact me.

[Shane Huntley @ShaneHuntley]

New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development.

https://t.co/Ec2TaMMXeQ

Stay safe out there everyone!

[pgboy @pgboydo]

@hFireF0X And this table is in data section, can be use as api hook securely before MS add it to PG protect list.

[mj0011 @mj0011sec]

Today was my last day at Qihoo360.

It’s feeling great to grown up together with No.1 security teams & products of China for 14 years.

Not quite feel sad with the good memories of the amazing people there.
Time for new challenges.

[pgboy @pgboydo]

@jonasLyk Yeah, I agree, procmon is very powerful, but It is hard to extend, so I create this project to do that , Especially find EOP(see EOP branch), The driver in this project is full reverse from procmon(even bugs 😅). you can modify/extend it and replace original procmon's driver

[pgboy @pgboydo]

@jonasLyk Emm. Ignore the poor gui you can just replace the procmon`s driver...

[pgboy @pgboydo]

@zinwa_lin 特短大军无处不在

[pgboy @pgboydo]

So. Same as I guessed --> "PerfInfoLogSyscallEntry"

[Nick Peterson 🇺🇲 ✝️ @nickeverdox]

InfinityHook sample is live, please consult the readme. Massive kudos to @0xNemi for incredible code clean-up. Microsoft says this is not security issue, have fun.

https://t.co/a0cUu4zvrA

[Aleph Research @alephsecurity]

We hacked our way to executing an interactive bash shell on iOS on QEMU. We based the research on the work done by @zhuowei. Thanks! https://t.co/p3GWTHVv4F

[argp @_argp]

Happy Ghidra month everybody!
https://t.co/eyH5tFbO1N

[Alex Ionescu @aionescu]

Interested in Hyper-V Internals? Read Part 2 of my continuing series on "Writing a Hyper-V "Bridge" for Fuzzing" as we get into the guts of hypercalls: https://t.co/POrIeZRbL6 with sample code and more!

[j00ru//vx @j00ru]

In an effort to share more of my source code publicly, I've uploaded Bochspwn Reloaded (the kernel infoleak detector) to GitHub. For those interested, it may shed some light on the implementation details of the project. See: https://t.co/hnPva5FDs6

[Dalai Clawma - 不名誉の前に死 8===D @greyhathackr]

What People believes what programming is - VS - Reality
@Maliciouslink @MalwareTechBlog

[Morten Schenk @Blomster81]

Just finished presentation on Windows 10 kernel exploitation at @BlackHatEvents slides and code is on GitHub https://t.co/73kIAR2POJ

[j00ru//vx @j00ru]

Announcing Bochspwn Reloaded – a new kernel memory infoleak detector – and the REcon Montreal 2017 slides. https://t.co/8I77dBEBU0