VollRagm

21 • Moderator @UnknownCheats • Interested in game-hacking and low-level development

[VollRagm @vollragm]

Have you ever wondered if it was possible to execute code inside of a drivers .data section? Well, I did.

I created a PoC that abuses Windows' LargePageDrivers feature to copy shellcode into the beep.sys .data section and execute it.

Blog post: https://t.co/pcGVQkDBd8

[VollRagm @vollragm]

Just released kauma: a script showcasing real-world cryptographic implementations & attacks. It includes the well-known Galois/Counter Mode with nonce reuse attacks, padding oracle attacks & more. Performance improvements with PCLMULQDQ are coming soon. https://t.co/cNSsQ3YqU9

[Arthur "Gerhart" Khudyaev @gerhart_x]

HyperViews - modified version of PTView by @VollRagm, which are uses C# version of Hyper-V memory manager plugin.
https://t.co/yo1TJLNMfG

[VollRagm @vollragm]

Michal is a pioneer in native C# compilation. His bflat compiler enables C# to compile natively to platforms like UEFI Firmware. His projects laid the groundwork for my KernelSharp PoC. If you're interested in C# or low-level development, definitely check out his work.

[Michal Strehovský @MStrehovsky]

Wrote an article on how I built a bare-metal bootable "game" in C#: https://t.co/srD4sOtU4I

[es3n1n @es3n1n]

Obfuscating native code for fun: Part 1 - Introduction
(introduction and some funny stuff like breaking ida/ghidra/binja decompilers)

https://t.co/rKqNnBhVoe
https://t.co/xkIpykH3jQ

[Michal Strehovský @MStrehovsky]

Made a bare metal bootable maze "game" in C# as a demo of what's possible with bflat's zerolib. Anyone interested in reading a write-up of how I did it? Source here: https://t.co/Jkh1MqyUn6

[Rockstar Games @RockstarGames]

We are very excited to let you know that in early December, we will release the first trailer for the next Grand Theft Auto. We look forward to many more years of sharing these experiences with all of you.

Thank you,
Sam Houser

[Michal Strehovský @MStrehovsky]

I've released a new version of my bflat compiler. This is a release candidate catching up to .NET 8. Apparently GitHub is having some issue with the daylight savings time and this release comes from the future. Grab it while it's still hot: https://t.co/4uV6RB0KiR

[Mr. Rc @rcx86]

during reverse engineering, whenever i see some unknown instruction the first place i go to is this page:
https://t.co/KHcCllEpU5

you can click on each instruction and see their psuedocode, this helps you to understand what are the steps that this instructions takes which are not obvious
like how ret instructions pops the stack pointer into eip.

[Dave W Plummer @davepl1968]

The Windows Source Code: A Tour of Task Manager!

[VollRagm @vollragm]

@urbanthoughts11 @hdambeck Unrealistic depiction on the Deutsche Bahn side, the video does not include a police operation, repairs on the train, track disruption, animals on the tracks and the mandatory delay of a preceding train.

[VollRagm @vollragm]

@sinclairq8 This is very cool

[VollRagm @vollragm]

🫢🫢🫢🫢🫢

[RvLeshrac @RvLeshrac]

@5zrdh2gfnp @T0bi__0 @chompie1337 @whereisbp Yes. Don't use undocumented shit in drivers unless you work directly with MS, ever. Because you'll fuck up someone's OS install, possibly their data, and maybe even the hardware itself.

[VollRagm @vollragm]

@IccupSupporter The issue relies in your kdmapper PiDDBCache cleaning function.

[VollRagm @vollragm]

🥶

[VollRagm @vollragm]

@KeyAuth I'd suggest you stop stalking me on Discord and get working on your code then.
KeyAuth's use of deprecated and poorly named code speaks for itself.
Furthermore, auth[.]gg has scored better in the PageSpeed insights than KeyAuth, even though the former is awfully slow already.

[NASA InSight @NASAInSight]

My power’s really low, so this may be the last image I can send. Don’t worry about me though: my time here has been both productive and serene. If I can keep talking to my mission team, I will – but I’ll be signing off here soon. Thanks for staying with me.

[VollRagm @vollragm]

@MStrehovsky false
true
?

[VollRagm @vollragm]

@KeyAuth In fact, the application is a web application and the authentication is invoked by the webservices backend, hence removing the requirement for a client and the possibilty of cracking it.

[VollRagm @vollragm]

@KeyAuth I was writing an application for a client who insisted on using said provider.
I did not enjoy working with that Auth provider at all, however, personally, I do not think KeyAuth is a better alternative. I have not come across any good one yet. I recommend creating a custom API.

[VollRagm @vollragm]

@Snayrex2 @alxoh @bad_chomper23 @AntiCheatPD