Have you ever wondered if it was possible to execute code inside of a drivers .data section? Well, I did.
I created a PoC that abuses Windows' LargePageDrivers feature to copy shellcode into the beep.sys .data section and execute it.
Blog post: https://t.co/pcGVQkDBd8
Just released kauma: a script showcasing real-world cryptographic implementations & attacks. It includes the well-known Galois/Counter Mode with nonce reuse attacks, padding oracle attacks & more. Performance improvements with PCLMULQDQ are coming soon. https://t.co/cNSsQ3YqU9
Michal is a pioneer in native C# compilation. His bflat compiler enables C# to compile natively to platforms like UEFI Firmware. His projects laid the groundwork for my KernelSharp PoC. If you're interested in C# or low-level development, definitely check out his work.
Obfuscating native code for fun: Part 1 - Introduction
(introduction and some funny stuff like breaking ida/ghidra/binja decompilers)
https://t.co/rKqNnBhVoe
https://t.co/xkIpykH3jQ
Made a bare metal bootable maze "game" in C# as a demo of what's possible with bflat's zerolib. Anyone interested in reading a write-up of how I did it? Source here: https://t.co/Jkh1MqyUn6
We are very excited to let you know that in early December, we will release the first trailer for the next Grand Theft Auto. We look forward to many more years of sharing these experiences with all of you.
Thank you,
Sam Houser
I've released a new version of my bflat compiler. This is a release candidate catching up to .NET 8. Apparently GitHub is having some issue with the daylight savings time and this release comes from the future. Grab it while it's still hot: https://t.co/4uV6RB0KiR
during reverse engineering, whenever i see some unknown instruction the first place i go to is this page:
https://t.co/KHcCllEpU5
you can click on each instruction and see their psuedocode, this helps you to understand what are the steps that this instructions takes which are not obvious
like how ret instructions pops the stack pointer into eip.
@urbanthoughts11@hdambeck Unrealistic depiction on the Deutsche Bahn side, the video does not include a police operation, repairs on the train, track disruption, animals on the tracks and the mandatory delay of a preceding train.
@5zrdh2gfnp @T0bi__0@chompie1337@whereisbp Yes. Don't use undocumented shit in drivers unless you work directly with MS, ever. Because you'll fuck up someone's OS install, possibly their data, and maybe even the hardware itself.
@KeyAuth I'd suggest you stop stalking me on Discord and get working on your code then.
KeyAuth's use of deprecated and poorly named code speaks for itself.
Furthermore, auth[.]gg has scored better in the PageSpeed insights than KeyAuth, even though the former is awfully slow already.
My power’s really low, so this may be the last image I can send. Don’t worry about me though: my time here has been both productive and serene. If I can keep talking to my mission team, I will – but I’ll be signing off here soon. Thanks for staying with me.
@KeyAuth In fact, the application is a web application and the authentication is invoked by the webservices backend, hence removing the requirement for a client and the possibilty of cracking it.
@KeyAuth I was writing an application for a client who insisted on using said provider.
I did not enjoy working with that Auth provider at all, however, personally, I do not think KeyAuth is a better alternative. I have not come across any good one yet. I recommend creating a custom API.