Danny Quist (@OpenMalware) profile picture

Danny Quist

@OpenMalware

Open Malware Project by Danny Quist. Formerly Offensive Computing.

 Phoenix, Arizona
Joined August 2009
  • Tweets929
  • Following196
  • Followers12.6K
19Media
Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)Photo by Danny Quist (@OpenMalware)
⁉️ Miss the stream with Danny Quist (@openmalware)? You can check it out here 👇 youtube.com/watch?v=MfU1yh1X… Danny discusses the early challenges with collecting and sharing large malware corpuses 😈
1
9
869
Danny Quist retweeted
Brandon Edwards (@drraid) profile picture
Brandon Edwards@drraid19 Jul 2024
Image from Brandon Edwards (@drraid)
3
1
11
2,414
#flareon10 Early Registration is now live! flare-on10.ctfd.io/register
1
58
2
108
22,066
Danny Quist retweeted
nickharbour (@nickharbour) profile picture
nickharbour@nickharbour8 Sep 2023
The #flareon10 countdown is now live at flare-on.com. Clear your weekend plans for Sept. 30th.
7
82
19
255
59,406
#DFIR LiveStream Series | Stay Ahead of Ransomware with @rj_chap & @maridegrazia Guest speaker: @chamewco | @OpenMalware Episode 2: Ransomware Gangs Continue to Evolve 5/18 1:00 pm ET youtube.com/watch?v=UIbmwHUQ…
1
1
2
2,891
Danny Quist retweeted
yed (@frdfzi) profile picture
yed@frdfzi2 Apr 2023
Five layers of stages of encoded Powershell get decoded in just 3 seconds using PSUnveil hahaha just discover this tool. kahusecurity.com/posts/intro…
Image from yed (@frdfzi)
9
117
6
350
51,455
In this video I'll walk through a #cyberchef recipe that uses the fork operation to loop over obfuscated values to get the next stage script from an HTA file. youtu.be/kqa4gIV5kD0 Thanks to @mattnotmax/@executemalware for an old twitter convo that provided the inspiration 🙏
CyberChef Recipe to Loop Over Values to Modify and Decode

CyberChef Recipe to Loop Over Values to Modify and Decode

This video explores how to operate on individual chunks of data fro...

youtube.com
1
16
41
3,903
We are so so so thrilled that the #SECVC was a @defcon black badge event! Congratulations to team Spilt Beans for winning first place and the black badge!
Image from Social Engineering Community (@sec_defcon)
Image from Social Engineering Community (@sec_defcon)
9
20
3
190
Danny Quist retweeted
Vector 35 (@vector35) profile picture
Vector 35
@vector3521 Jun 2022
A great question on our stream last Friday was "can you just show me the basic blocks associated with a variable" and the answer was "check back next week"! On Monday we published Tanto (github.com/vector35/tanto) and an associated blog showing what it does: binary.ninja/2022/06/20/intr…
Image from Vector 35 (@vector35)
3
13
If you were at @reconmtl get a covid test. The one you took before your flight doesn’t count, a few friends have tested positive today that were clear for their flight. Plz don’t attend @HushCon without doing it, respect your friends! I’m not at either con just raising awareness.
5
13
2
60
I've just discovered this amazing document showing super clearly the relation between the opcode and the instruction 🤯 pnx.tf/files/x86_opcode_stru…
Image from Alice Climent (@AliceCliment)
15
497
31
2,026
Replying to @SwiftOnSecurity @CNMF_CyberAlert @CISAgov @FBI @US_CYBERCOM
The malware is pretty old - the samples shared by US CYBERCOM only overlap with the PE exports. I had to write new and better rules for it to get a more robust coverage. valhalla.nextron-systems.com…
2
3
1
23
Danny Quist retweeted
Rolf Rolles (@RolfRolles) profile picture
Rolf Rolles@RolfRolles6 Aug 2019
Here are the slides for my RECON and BlackHat presentation, "Automation Techniques in C++ Reverse Engineering": msreverseengineering.com/blo…

Automation Techniques in C++ Reverse Engineering — Möbius Strip Reverse Engineering

Here are the slides for my recent presentation at RECON, entitled "Automation Techniques in C++ Reverse Engineering". As usual, my slides use in-frame animations, so in brief, navigate them using...

msreverseengineering.com
5
241
540
Danny Quist retweeted
Rolf Rolles (@RolfRolles) profile picture
Rolf Rolles@RolfRolles5 Aug 2019
I'll be presenting my talk, "Automation Techniques in C++ Reverse Engineering", at BlackHat on Thursday at 2:30 blackhat.com/us-19/briefings…
1
13
74
Using #GHIDRA to solve a hardware CTF challenge, abusing of the ARM decompiler and it works like a charm. Write-up with a mini-tutorial to start reversing STM32 target: phil242.wordpress.com/2019/0… 👍
Insomni’Hack 2019 CTF – Perfectly Unbreakable Flag – 500

Insomni’Hack 2019 CTF – Perfectly Unbreakable Flag – 500

Challenge description To our surprise, we found out that our challenge from last year has been counterfeited by another CTF.Since we must protect our flag business as much as we can, we invested in…

phil242.wordpress.com
83
1
204
Danny Quist retweeted
Rolf Rolles (@RolfRolles) profile picture
Rolf Rolles@RolfRolles20 Mar 2019
Ghidra's extensibility is jaw-dropping. Today I needed the pcode to model the x86 parity flag, which it doesn't do by default. 30 minutes and a 35-line patch to ia.sinc later, I can proceed. No other tool even comes close to how easy that was. (diff: github.com/RolfRolles/Ghidra… …)
Image from Rolf Rolles (@RolfRolles)
4
92
1
321
Published another script: Automatically find crypto-constants (and other patterns) using Yara in #Ghidra. Allows for quick identification of crypto & checksumming routines, right in Ghidra. github.com/ghidraninja/ghidr…
2
112
1
276
Danny Quist retweeted
x0rz (@x0rz) profile picture
x0rz@x0rz26 Apr 2017
If you want to get started with LLVM for security research take a look at github.com/roachspray/opcde2… #OPCDE2017
Image from x0rz (@x0rz)
119
4
239
Imagine trying to sleep with the inventor of Linux watching you
Image from SwiftOnSecurity (@SwiftOnSecurity)
41
34
25
245
I'm awarded a Google PhD fellowship in Machine Learning, for work in Bayesian deep learning. Thanks @googleresearch! goo.gl/9sK2a1
Announcing the 2017 Google PhD Fellows for North America, Europe and the Middle

Announcing the 2017 Google PhD Fellows for North America, Europe and the Middle

Posted by Michael Rennaker, Program ManagerGoogle created the PhD Fellowship program in 2009 to recognize and support outstanding graduate students...

research.google
20
25
1
323
Load more