belabs_engineer (@belabs_engineer) header
belabs_engineer (@belabs_engineer) profile picture

belabs_engineer

@belabs_engineer

Interested in anything (de)obfuscation related.

Joined November 2024
  • Tweets147
  • Following82
  • Followers194
7Media
Photo by belabs_engineer (@belabs_engineer)Photo by belabs_engineer (@belabs_engineer)Photo by belabs_engineer (@belabs_engineer)Photo by belabs_engineer (@belabs_engineer)Photo by belabs_engineer (@belabs_engineer)Photo by belabs_engineer (@belabs_engineer)
belabs_engineer retweeted
Mark Ermolov (@_markel___) profile picture
Mark Ermolov@_markel___Oct 30
Here is a partial list of IOSB SB Port Ids of North (CPU) Complex IPs for modern Intel desktop CPUs. The second number is the mapped Port Id accessible for the South Bridge. You will not find it even in the Silicon Refernce Code ))
Image from Mark Ermolov (@_markel___)
5
8
1
68
3,786
belabs_engineer retweeted
Kyle Elliott (@MaybeFindBugs) profile picture
Kyle Elliott
@MaybeFindBugsOct 30
Replying to @daaximus @D16_Makaveli
If only these companies decided to hire people with actual game cheating experience instead of just continuing to hire the same EDR people that are about 15 years out of practice. 🙃
1
12
193
There ain't a single aspect of my life that hasn't drastically improved since beginning to pray and read the Bible every single day.
3
2
25
1,330
belabs_engineer retweeted
ころころゴロリ (@k0mkc) profile picture
ころころゴロリ@k0mkcOct 21
Image from ころころゴロリ (@k0mkc)
Image from ころころゴロリ (@k0mkc)
Image from ころころゴロリ (@k0mkc)
Image from ころころゴロリ (@k0mkc)
FACEIT CS2 (@FACEITcs) profile pictureFACEIT CS2
@FACEITcsOct 16
In Season 9, we issued 447 toxicity bans per day. Level 10s were banned at 3.6 times the rate of Level 1s. The higher the skill, the more often accounts cross the line. Light trash talk is allowed under the new policy, but abuse will still be punished regardless of level.
Image from FACEIT CS2 (@FACEITcs)
21
30
3
732
69,396
belabs_engineer retweeted
ころころゴロリ (@k0mkc) profile picture
ころころゴロリ@k0mkcOct 15
WardogsからTheiaアンチタンパーを完全に削除するスクリプトを公開しました。 クラッシュが頻発している方やフレームレート低下に悩んでいる方は検討してみてください。 ご自身の責任の下ご利用ください。 #Wardogs #FreeWardogs github.com/hseoa/FreeWardogs
13
14
226
16,979
belabs_engineer retweeted
ころころゴロリ (@k0mkc) profile picture
ころころゴロリ@k0mkcOct 14
Damn, I can devirtualize entire VGK now. I will continue to wield this power responsibly.
Image from ころころゴロリ (@k0mkc)
Image from ころころゴロリ (@k0mkc)
Image from ころころゴロリ (@k0mkc)
Phillip Koskinas (@deteccphilippe) profile picturePhillip Koskinas@deteccphilippeOct 13
Damn, I can delete entire accounts now. I will continue to wield this power responsibly.
Image from Phillip Koskinas (@deteccphilippe)
Image from Phillip Koskinas (@deteccphilippe)
27
41
3
864
51,418
belabs_engineer retweeted
Daax (@daaximus) profile picture
Daax
@daaximusOct 12
Replying to @AndrewCurran_
Anthropic really drinking the goofy juice recently. Dario, if you need a red team that understands IoT / embedded landscape feel free to reach out. Yours needs to be on unemployment.
1
4
31
945
❗️ Samsung's Galaxy S26 was remotely hacked three times on Day One of Pwn2Own Ireland, while Google's Pixel 10 survived a $300,000 attempt. Researchers earned $388,500 for 32 zero-days and also broke LiteLLM, Sonos, Philips Hue, Oracle's Autonomous AI Database and OpenAI Codex. VinSOC leads with $97,500 as Day Two gets underway with KAIST targeting the Pixel 10 over USB.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
59
355
43
3,150
136,893
belabs_engineer retweeted
ころころゴロリ (@k0mkc) profile picture
ころころゴロリ@k0mkcOct 6
最近Wardogsをたまにプレイします。そこそこ楽しんでいますが、Theiaというアンチタンパーが邪魔なので完全に削除してプレイしています。フレームレートも大幅に改善するので、とても快適です。アンチチートに改善が必要な点を除けば素晴らしいゲームだと思います。@WARDOGS
22
15
2
424
57,499
belabs_engineer retweeted
w^x (@winapi_) profile picture
w^x@winapi_Oct 4
Replying to @aftermath_labs @_xeroxz
How it feels to use BitBender
Image from w^x (@winapi_)
1
8
394
belabs_engineer retweeted
DHH (@dhh) profile picture
DHH
@dhhAug 22
I respect what Asahi has achieved, but this shit is just retarded. Maybe SOMEONE should spin up a new effort, lean in with the best agents, and actually finish the job on M3, M4, M5?
Image from DHH (@dhh)
238
86
55
3,179
251,697
belabs_engineer retweeted
domas (@xoreaxeaxeax) profile picture
domas@xoreaxeaxeaxAug 13
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
165
1,068
184
8,161
1,101,279
belabs_engineer retweeted
Aftermath Labs (@aftermath_labs) profile picture
Aftermath Labs@aftermath_labsAug 1
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now. back.engineering/blog/31/07/…
Image from Aftermath Labs (@aftermath_labs)
3
94
1
506
27,859
belabs_engineer retweeted
Lord Chop (@lord_chop) profile picture
Lord Chop@lord_chopJul 31
This is seventeen 9/11s for Tumblr
This quoted post is unavailable.
Try viewing anyway · View on X
2
59
1,526
55,773
belabs_engineer retweeted
kernullist (@kernullist) profile picture
kernullist
@kernullistJul 28
Things have been a little busy lately, so it took a while to get the next post out. Part 5 of the hypervisor-based game cheat series is up. This part moves beyond CPU-side memory and into advanced I/O and trusted-device boundaries. It covers SR-IOV, SIOV, SVA, PASID, ATS, PRI, GPU virtualization, CXL, TDX Connect, and AMD SEV-TIO. The main question is how device translations, queues, fences, and memory-sharing paths affect what a hypervisor-assisted cheat can observe, how current that view is, and how the result reaches a usable output. Thanks and credit to Yun Wang and coauthors for VIO, Dufy Teguia and coauthors for GOODKIT, Juechu Dong and coauthors for Toleo, Kaustav Goswami and coauthors for Space-Control, and Hansika Weerasena and coauthors for their formal SEV verification work. Their research helped shape several of the deeper sections in this part. It is a long read, but advanced I/O needed the space. Feel free to give it a read. Feedback is always welcome if anything feels unclear, too long, or technically off. 😇 kernullist.github.io/kernull…

About Hypervisor Cheats, Part 5: Advanced I/O, GPU, CXL, and Trusted Device Boundaries

Part 4 followed CPU-side state across current roots, views, exits, and timers. Part 5 follows the same idea into devices, where requesters, mappings, queues, fences, and trusted links can all change...

kernullist.github.io
2
10
41
2,436
belabs_engineer retweeted
Mark Ermolov (@_markel___) profile picture
Mark Ermolov@_markel___Jul 24
Hacking into an Intel desktop platform...
Image from Mark Ermolov (@_markel___)
8
5
155
8,309
belabs_engineer retweeted
Neo (@Neo__Hq) profile picture
Neo
@Neo__HqJul 23
Replying to @clavicular
"fiverrmaxed some jester.“
3
9
833
37,879
belabs_engineer retweeted
Vector 35 (@vector35) profile picture
Vector 35
@vector35Jul 22
Celebrate 10 years of Binary Ninja! For the first time ever, we’re offering a 35% discount! Join us for 10 full days of giveaways including licenses, merch, and more. Huge shoutout to everyone who has been with us since the beginning, and here’s to everything still to come. Join in on the celebration: binary.ninja/10years
Image from Vector 35 (@vector35)
7
39
7
153
14,836
belabs_engineer retweeted
ころころゴロリ (@k0mkc) profile picture
ころころゴロリ@k0mkcJul 18
Posted to Hatena Blog Riot Vanguard Unpacker (V1)を公開します - ゴロリのブログ k0mkc.hatenablog.com/entry/2… #はてなブログ
Riot Vanguard Unpacker (V1)を公開します - ゴロリのブログ

Riot Vanguard Unpacker (V1)を公開します - ゴロリのブログ

Riot Vanguardのユーザーモード実行ファイルvgc.exeとvgm.exeをアンパックできるスクリプトを公開します 一応いっておくと、ちょっと前のVanguardアップデートでパッカーの構造に微妙に変更が入ったので今回公開する奴は最新バージョンで使えません ただこのVanguardアプデは私のアンパック自動化…

k0mkc.hatenablog.com
4
1
20
6,416
belabs_engineer retweeted
Shweta Shinde (@shw3ta_shinde) profile picture
Shweta Shinde@shw3ta_shindeApr 14
First attack on the interconnect that breaks confidential computing: Fabricked. A malicious hypervisor misconfigures the Infinity Fabric to gain arbitrary read/write access to AMD SEV-SNP CVMs. 100% success. Software-only. See fabricked-attack.github.io #ConfidentialComputing #AMD
1
13
29
1,767
Load more