silentwarble

[silentwarble @silentwarble]

@guyru_ How have you been liking Pi? Looking to pivot from claude code for red teaming stuff incl RE. I heard Pi's updates break stuff all the time. That true?

[GrapheneOS @GrapheneOS]

We're happy to announce a long-term partnership with Motorola. We're collaborating on future devices meeting our privacy and security standards with official GrapheneOS support.

https://t.co/8flkjD52Eg

[silentwarble @silentwarble]

Nice. Added to https://t.co/eeQS2oFYdS

[winterknife 🌻 @_winterknife_]

Releasing SILVERPICK, a Windows shellcode development framework using C/C++.

https://t.co/Jk94d3OvMX

[silentwarble @silentwarble]

@GrapheneOS @0xcyp Do you know a rough price range for these new devices? I've been holding off on upgrading waiting to see these new ones.

[silentwarble @silentwarble]

Good stuff as always

[Tim Blazytko @mr_phrazer]

The recording of our (CC @nicolodev) talk "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" at @reconmtl is now online!

Recording: https://t.co/T5Ses6R0ba

Slides: https://t.co/O9s6ItbHFw

#BinaryNinja Plugin: https://t.co/cek4bXbNyB

[Rasta Mouse @_RastaMouse]

lol whole new calling conventions for PIC literally a day after I release my kit 😅 https://t.co/Pg0jUSleB0

[Tim Blazytko @mr_phrazer]

We at @emproofsecurity open-sourced a free firmware reverse engineering workshop for self-study.

Topics: ELF analysis, cracking, malware triage, embedded-Linux, bare-metal, crypto-key extraction, anti-analysis. Docker setup and solutions included.

https://t.co/fA4N0ugJr7

[MDSec @MDSecLabs]

We're really bringing the 🔥 with our next Nighthawk release - Janus - https://t.co/hxp6M8XkWO

[Justin Elze @HackingLZ]

You can only score 100% ATT&CK coverage for so long

https://t.co/86xqEIwcoI

[MDSec @MDSecLabs]

We've just pushed details on our latest #Nighthawk release (Sivako) https://t.co/iSoLVbsnJK - including async BOF support, native kerberos and more 🔥 https://t.co/yPUUBrA5pF

[silentwarble @silentwarble]

@tijme @OrangeCon_nl this looks cool. Haven't tested yet but added to pic library https://t.co/BYFXSoJ1qE

[Tijme Gommers @tijme]

Exciting times. I'm publishing Dittobytes today after presenting it at @OrangeCon_nl !

Dittobytes is a true metamorphic cross-compiler aimed at evasion. Use Dittobytes to compile your malware. Each compilation produces unique, functional shellcode.

https://t.co/761G96JDF1

[silentwarble @silentwarble]

@Flangvik I've enjoyed my Yamaha monitors as well. Never got a sub as they had enough bass for me.

[db @whokilleddb]

Do you want to trigger shellcode only when:
- Certain DNS resolution happens?
- Certain servers are reached out to?
- When you get a 112 byte long response?
...etc

Meet InternetSetStatusCallback() for fine tuning execution (or if you are just bored):

https://t.co/774bIeEsN7

[Cody Thomas @its_a_feature_]

Are you thinking of writing a C2? Do you want to modify an existing C2? Have you ever thought "why on earth did they do it that way"? Join me as I show what I've learned from 7 years of open source C2 and agent development so you can start off with success :) I can't wait!

[silentwarble @silentwarble]

@HackingLZ I'm not sure what to tell people trying to break into the field. I've just been saying its possible but way harder. Not sure where to point them as an alternative.

[silentwarble @silentwarble]

@xCipher007 Wouldn't be a proper ctf without some jank in the testing lab. I've never had a test where everything went without a hitch...🤬

[Josh @passthehashbrwn]

New blog from me about a bug in Power Apps that allows execution of arbitrary SQL queries on hosts connected through on-prem data gateways. This can turn external O365 access into compromised on-prem SQL servers. https://t.co/Fukw9MLK0j

[silentwarble @silentwarble]

@RedTeamTactics I have my team generally match the pace of the org. Unless we think it's a major issue, I've found that maintaining internal relationships and not stressing everyone out provides more value. So we just pick our battles. We set fires occasionally but we're selective about it.

[silentwarble @silentwarble]

This continues to be a great tool. I'm using it to make stripped down throwaway VMs for when we do ops. Otherwise win11 is such a hog: https://t.co/yTtwQapaAa