painter retweeted
Are you ready? We're revealing some of the exciting new features in IDA 9.0, launching on September 30th! 🚀 First up: C++ Exceptions Support in the Decompiler. Learn why this feature is a game-changer 🌐 eu1.hubs.ly/H0c8Q1L0
#idapro #decompiler
painter retweeted
After 3 years of development, today we proudly announce & celebrate the first release of a new hypervisor-based user-mode & kernel-mode debugger, @HyperDbg. 🎉
As an alternative to #Windbg, HyperDbg is mainly built for analyzing, reversing, and fuzzing!
github.com/HyperDbg/HyperDbg
painter retweeted
unlicense - A dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
Version 0.2.0 has been released. It adds support for DLL unpacking, .NET assembly unpacking (EXE only) and fixes a bug with some 2.x-packed EXEs.
github.com/ergrelet/unlicens…
painter retweeted
I don't see any backlash about Explorer styling, so StartAllBack 3.4 with all the major and minor modernizations is live!
painter retweeted
So uh, NVIDIA apparently just… open-sourced their Linux GPU drivers under a dual MIT/GPL licence.
※ For Ampere and Turing only, at least for now…?
developer.nvidia.com/blog/nv…
github.com/NVIDIA/open-gpu-k…
… Is the world finally coming to an end?
painter retweeted
Nvidia has been fined $5.5 million for hiding how many gaming GPUs were sold to crypto miners. The SEC found Nvidia had misled investors by reporting a huge boost in revenue related to “gaming," and hiding how much its success relied on the crypto market theverge.com/2022/5/6/230599…
painter retweeted
My full-binary, static type reconstruction toolkit is becoming increasingly robust. Pictured are fully-automated results from RPCRT4/x64, an experiment to see if public PDBs make the problem any easier than the stripped case (answer: not by much). Bootleg private PDBs!
painter retweeted
Things to look for in upcoming malware releases:
- Stolen/abused Nvidia certs
- packaging/distributing Nvidia files to leverage API abuse
- Nvidia detection and scanning for API to abuse
Further down the road we can expect some privilege elevation attacks likely.
painter retweeted
The LAPSUS$ Nvidia leak sadly also gave cheaters an advantage here. They are now capable of signing their cheat with an Nvidia cert which is bad for all games no matter the anti-cheat.
@nvidia fix this immediately.
painter retweeted
Breaking Google’s ReCaptcha v2 using.. Google.. Again : east-ee.com/2022/02/28/1367/
PoC of a fully-automated bypass of ReCaptcha v2:
painter retweeted
My iOS QEMU fork is just published.
Some notable features:
- iOS Restore
- S8000 SecureROM emulation (always FORCE_DFU)
- USB
- SPRR/GXF emulation
The repo is at github.com/TrungNguyen1909/q…
Tutorial/status can be found in the wiki section.
It is still very far from a usable device
painter retweeted
A lot of source code in the NVIDIA Leak 👀
In an internal document: "The security API consists of functions that can be used to access the registry [and files] in a manner that is undetectable to hackers" 🤔
REF: teapaw.org/serghei/status/1498779…
LAPSUS$ just asked NVIDIA to "COMPLETELY OPEN-SOURCE (and distribute under a foss license) their GPU drivers for Windows, macOS and Linux" until Friday.
More info on what happened before this:
bleepingcomputer.com/news/se…
painter retweeted
VMProtect Devirtualization: An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x github.com/JonathanSalwan/VM…
painter retweeted
The very important goal has been achieved, for the benefit of the entire information security society: we decrypted Intel XuCode!
painter retweeted
See how we used #Malcat to statically #unpack a multi-staged #DBatLoader abusing CVE-2018-0798, cloud downloads and even a bit of steganography:
malcat.fr/blog/exploit-stega…
painter retweeted
Bobby Kotick, Activision's longtime CEO, is expected to leave after Microsoft's deal to buy the videogame maker closes, people familiar say on.wsj.com/3fAZGoB















































