It’s been an API Hooking kinda evening on Maldev Academy. Learning about lots of different options definitely makes me think I’ll be using custom hooking code for anything I make. Anyone just go with pre-existing libraries for their projects?
JG
@joneagle.bsky.social
Socialist vegan hacker nerd, avid runner and consumer of copious levels of caffeine. He/him.
Today I've been working on a malicious browser extension for work. I took the great work done here: github.com/SimpleCyber/..., ripped it apart and made it do what I needed it to do. End result, immediate returning of key logging to my web server via the browser's local storage. Cool hey?
Security folks who have done Maldev Academy: I’ve just finished the basic modules. Should I do the basic challenges, then intermediate modules/challenges etc or do all the modules then all the challenges?
Tonight on my Maldev Academy practice I decrypted an encrypted payload using an undocumented Windows API to launch calc. Cool huh?
Today’s Maldev Academy stuff was making a DLL and running it with an exe. Cool!
Started on maldev academy properly this lunchtime and evening. Be honest, will only really knowing bits of C based on things I’ve written in C++/C# for specific attack vectors cause me any problems? I’m ready to hurt again.
Heading to Black Hat Europe for some training next week. Anyone else there and want to meet up for a coffee and a chat?
April has been home for over a month now, has her own bed with bedding that’s nicer than ours, and rules the house. She’s ace. Tonight we go to see a dog behaviourist about her dog reactivity to try and see whether she wants to befriend/beguile/behead them. #adoptdontshop
BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
Darth, then, wherever you may be I am a lord of the sith, said he And I’ll choke you all, wherever you may be And I’ll do it all with the force, said he
Thousands of people are ditching Tesla. Here’s one of them with a message you can see from space. Location: Black Rock Sands, Wales, UK Led By Donkeys is 100% funded by small donations.
Huh, a new declassified CIA guide to sabotaging fascism has suddenly gone viral www.404media.co/declassified...
Declassified CIA Guide to Sabotaging Fascism Is Suddenly Viral
The World War II-era "Simple Sabotage Field Manual" is full of steps that office workers can take to resist leadership.
404media.co
Just popping in here to say “Linux” and not be banned from the platform.
I recently found a way to get a Meterpreter shell out of a fully patched enterprise environment running Defender without being detected and for the low, low price of just £99.99… I still won’t tell you how.
It looks like the sky is bluer on the other side. Would you like an overly sarcastic paperclip with that?
Hanging out and working with colleagues all week this week. A nice change of pace but I do miss my pyjamas.
Response to coups by elected leaders: - South Korea: blocked by mass mobilization of citizens - Brazil: coup leader indicted, barred from politics - United States: coup leader re-elected with majorities in the legislature and a compliant Supreme Court
Today I’m raising money to send underrepresented folks to @defcon.bsky.social + other technical cons/training next year! Yes, you’ll get a tax write off ❤️ Hear our Scholar Stories for the impact of WISP: www.wisporg.com/scholars Here’s the donation link! wisporg.app.neoncrm.com/forms/donation
Scholars - Women in Security and Privacy
WISP Privacy Statement
wisporg.com
Correction: the source code to Crysis 3 was leaked in 2020 by Egregor ransomware group. The source code was in password protected 7z file. Either no one tried to bruteforce it, or people kept hush-hush about it. tfw the password was literally 123123
