@rpetrich

Former CTO @ Capsule8, Jailbreak tweak developer, reverse engineering enthusiast

 NYC
rpetri.ch
Joined February 2009
  • Tweets11.6K
  • Following872
  • Followers57.8K
102Media
Ryan Petrich retweeted
Grzegorz Tworek
@0gtweet19 Aug 2024
Phrack #71 Linenoise - "Master of Puppets - turning AV sandboxes into a botnet". What I can say... Honored and proud. Enjoy! phrack.org/issues/71/3.html
7
52
1
264
30,165
Phrack 71 is out, including my article on using instruction patching, syscall remoting, and in-memory implants: phrack.org/issues/71/14.html…
Phrack Zine@phrack19 Aug 2024
The time has come, and with it your reading material for the week. Phrack #71 is officially released ONLINE! Let us know what you think! phrack.org/issues/71/1.html
table for contents for Phrack 71

ALT table for contents for Phrack 71

4
7
1
49
15,241
Ryan Petrich retweeted
sha1lan@sha1lan12 Aug 2024
Why exploits prefer memory corruption Thanks to @halvarflake and @chompie1337! pacibsp.github.io/2024/why-e…

Why exploits prefer memory corruption

Why do most in-the-wild exploits that target end-user platforms use memory corruption?

pacibsp.github.io
65
2
251
19,093
I’m overjoyed to have an article of mine published in phrack after reading its back catalog for so long. Wish I could be at defcon to pick up a copy. Many thanks to the phrack staff for publishing it and to the early reviewer (you know who you are) who pushed me to improve it.
Phrack Zine@phrack10 Jul 2024
o/ We are excited to announce that we are bringing some professionally printed copies of Phrack 71 to give out at @defcon! We will share where to get them when the time comes.
Cover of Phrack 71

ALT Cover of Phrack 71

3
7
35
11,513
Ryan Petrich retweeted
Phrack Zine@phrack10 Jul 2024
o/ We are excited to announce that we are bringing some professionally printed copies of Phrack 71 to give out at @defcon! We will share where to get them when the time comes.
Cover of Phrack 71

ALT Cover of Phrack 71

24
129
14
519
127,881
Gough - Starry Night, PCB version
3
97
2
819
28,936
Evis Drenova
@evisdrenova19 Jul 2024
null pointers strike again! looks like the crowdstrike issue is a dereferenced null pointer that's trying to access null memory using the 'mov r9d, dward ptr r[8]' assembly operation. brutal.
33
1,951
41
10,183
579,573
What a fucking Rube Goldberg machine modern web development is. I cannot say this enough; this should not be the normal.
57
54
22
1,026
104,689
Ryan Petrich retweeted
James Kirk@Jiminy_Kirket5 Apr 2024
When the team lets the Engineering Manager submit a PR
Nature is Amazing ☘️
@AMAZlNGNATURE4 Apr 2024
33-year-old fruit bat with arthritis goes on 'flights' to keep him active
33
398
32
7,811
701,130
ok this is hilarious but also where has this been all my life: sendmixedsignals.vercel.app/ it’s a tool for weighting the variegated intentions you want to express to a counterparty and synthesizing them into one statement. A+ for shitposting but also blending in with humans

Send Mixed Signals

Find words to express your competing intents and inner conflicts

sendmixedsignals.vercel.app
Tom 7@tom75 Apr 2024
High quality SIGBOVIK live stream is active! twitch.tv/sigbovik

sigbovik - Twitch

sigbovik streams live on Twitch! Check out their videos, sign up to chat, and join their community.

twitch.tv
1
1
12
7,974
in the spirit of transparency, here’s what @rpetrich & I wrote in response to @CISAgov’s RFI on Secure by Design: kellyshortridge.com/papers/C… we believe Secure by Design can & should align with biz goals like velocity, dev productivity, and reliability blog: kellyshortridge.com/blog/pos…

Secure by Design RFI Response from Shortridge Sensemaking LLC

This blog post describes our response to CISA’s RFI on Secure by Design and links to the PDF of our comments.

kellyshortridge.com
1
14
5
44
31,251
this Valentine’s / Galentine’s / Palentine’s Day, want the secret to everlasting love? my secret is writing a book about my special interests! cry over a book deadline, not a human. invest in yourself and a love that will never leave, cheat, or let you down 🥰
19
20
4
238
50,564
My holiday present to myself is open sourcing my sandboxing tool, Callander. It uses some over the top binary analysis to apply beastly (and accurate) seccomp profiles that block shellcode and other common attack behavior. The announcement post covers how: rpetrich.com/blog/posts/anno…

Callander, A Sandboxing Tool That Knows Exactly What Syscalls to Allow - Activated

rpetrich.com
1
22
44
12,427
Thank you to the lovely mortals who attended my Wasm Day talk — “A Love Letter to Isolation” at @CloudNativeFdn KubeCon 🖤 The slides are now up on my site: kellyshortridge.com/slides/A… Come for isolation in nature and complex systems, stay for the WebAssembly Component Model
2
1
12
13,828
This Thinky Thinky Thursday, I'm publishing my response w/ @rpetrich to @ONCD’s RFI on Open-Source Software Security: kellyshortridge.com/blog/pos… We feel privileged to submit our recommendations for the requesting agencies to consider as they traverse software security challenges.

Open-Source Software Security RFI Response from Shortridge Sensemaking LLC

This blog post describes our response to the RFI on Open-Source Software Security and links to the response PDF.

kellyshortridge.com
3
8
6,518
Replying to @swagitda_ @rpetrich
woah ok so the implication of using Callander is that the attacker can't execute shellcode... now we're into the demo of an attack using an nginx exploit -> spawn remote shell and Callander kicks the attacker out when they try to pop a shell 🤯🤯🤯 magic by @rpetrich
a screenshot of the Callander demo. It shows an attacker spawning a remote shell by exploiting an nginx vulnerability.

ALT a screenshot of the Callander demo. It shows an attacker spawning a remote shell by exploiting an nginx vulnerability.

a screenshot of a demo of Callander. It shows an attacker being kicked out when trying to spawn a remote shell on an nginx process that's sandboxed by Callander.

ALT a screenshot of a demo of Callander. It shows an attacker being kicked out when trying to spawn a remote shell on an nginx process that's sandboxed by Callander.

1
1
9
6,546
tomorrowww (Thursday) at 13:30 ET / 17:30 GMT catch me live on the @AllDayDevOps virtual stage and ask me all your Qs about resilience It’s ✨ free ✨ and you can admire my trippy stable diffusion backgrounds along with my thot lederhosen Register here: alldaydevops.com/addo-speake…

Kelly Shortridge

Fastly OCTO

alldaydevops.com
3
7
4,274
After many years, I’m back on the public speaking circuit I’ll be presenting at All Day DevOps tomorrow (Thursday) on system calls, sandboxing, and program analysis. Join me at 15:30 ET for an adventure into the depths of Linux. It’s virtual and free. alldaydevops.com/addo-speake…

Ryan Petrich

SVP working on SDLC

alldaydevops.com
3
2
1
41
14,282
new post: the SUX Rule for safer code kellyshortridge.com/blog/pos… it’s short for Sandbox-free - Unsafe - eXogenous, based on Chromium’s Rule of 2 If your code does all 3 of: - runs without a sandbox - written in an unsafe language - processes exogenous inputs your code totally SUX

The SUX Rule for Safer Code

This posts is about the SUX Rule for safer code, a rebranding of Chromium’s Rule of 2 that doesn’t anger Sith lords.

kellyshortridge.com
5
22
2
86
29,340
People stormed out of the Black Hat talk I gave w/ @nicolefv in 2019 on applying DevOps practices to infosec. I gave the same talk at Velocity later that year and software ppl were SO inspired; “omg I can extend X practice to hurt attackers?? yesplz!!” Difference was v telling.
4
5
1
38
12,244
Load more