web: https://xitter.cf/t.co/IcZoSJKtPf git: https://xitter.cf/t.co/TKQZNpsQHp
Joined April 2020
- Tweets72
- Following190
- Followers1.1K
- Likes19.3K
Pinned Tweet
Protecting processes PML4 address using a global kernel exception hook. Does not trigger PatchGuard and is compatible with HVCI.
Bit unstable, does not handle any edge cases at all, just wanted to experiment with it a little.
github.com/SamuelTulach/Hook…
so who’s gonna be the first one to patch PSP to cheat in some game?
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
👀
T-minus 5 minutes until Dexerto or Pirat_Nation stir the pot about Ubisofts new advancements in anti-cheat… I’m all for Ubisoft taking it on, they have very talented people working on that team.
news.ubisoft.com/en-us/artic…
Across many different systems and VMs, I always run into random issues with basically all harnesses.
Is there some good harness that has actual GUI and works well on Windows?
If not I might just vibe one based on codex-cli and WinUI3.
I had to already file false positive reports to several EDRs so they would stop blocking my website.
I have a really bad feeling they just leech off the community rating on @virustotal, because for some reason my site is bombarded with bogus negative ratings. (1/2)
From what I've checked, other people's blogs don't have this issue, so I am kind of wondering why my site specifically. It's a static blog hosted on GitHub pages. There are sites writing about literal malware development having no issues what so ever... (2/3)
Pushed yet another small update to unxorer, this time improving performance by a bit (std::move skill issue)
Had some time, so I've added custom handling of few AVX2 instructions to unxorer. It now works with the popular xorstr library even with AVX being enabled.
SecureFakePkg doing numbers...
But in all seriousness, I hope they have basic checks to catch this and, at least for now, only kick people for it - since even those without intent to cheat might try it without realizing the possibility of getting banned.
Well, it's never too late, but it's finally good to see this happen, as it does impact cheats greatly. This is a good step in the right direction for the entire gaming ecosystem. Good job to both @CallofDuty and @Battlefield's anti-cheat teams for pushing towards a more secure gaming platform.
It won't stop things like DMA, but it does put up a big barrier to eliminate and detect/prevent spoofers better and also eliminate a large portion of cheats. I want to make sure you guys all understand that having the features enabled is one thing, but it's about how you use them in anti-cheat that matters the most here. Regardless, this is a big W.
I have decided to release it now, even though it's still pretty much WIP. Not sure how soon I will get back to it, since it has already fulfilled its purpose of getting strings that I needed from huge memory dump.
Samuel Tulach retweeted
More news coming to you from the soon-to-be-released IDA 9.2: we're taking the first step toward making development on top of #IDA more accessible—by open-sourcing the C++ SDK and IDAPython: eu1.hubs.ly/H0m1XKc0
#ReverseEngineering #DevTools #Infosec #Cybersecurity
