Hey @bytecodevm (eleven red pandas 🐼🐼🐼🐼🐼🐼🐼🐼🐼🐼🐼), got any spicy bytecode / VM / language implementation / JIT / music

Bagnes, Switzerland
Joined November 2010
eleven red pandas retweeted
Kernel shellcode resources out there: PLATINUMPICK: Windows KernelMode Shellcode Development Framework github.com/winterknife/PLATI… sickle-pdk: payload dev kit with a few ring 0 stubs github.com/wetw0rk/sickle-pd… No real generator exists for modern Windows. Guess we’ll have to build one
13
73
2,275
eleven red pandas retweeted
CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty. Write-up: samchen.blog/blog/vscode-nes…
8
43
3
312
24,189
eleven red pandas retweeted
x86rc/vmp-lazy-unpack 是一款 Windows 下面的模拟脱壳工具,直接模拟进程加载进行脱壳分析,可以把模拟内存中的进程dump,不挂调试器,不走live dump! 简单来讲,你可以认为它是一个脱壳专用的迷你进程虚拟机! 以前的神级技术现在直接开源了! github.com/x86rc/vmp-lazy-un…
7
35
1
312
12,509
eleven red pandas retweeted
Check out our new VMProtect (v3.0 - v3.10 latest) unpacker 👀 More to come…
6
17
160
10,049
eleven red pandas retweeted
Windows 这波脸面是真挂不住了。 有人整出一套开源的 PowerShell 脚本,GitHub 上挂着 58K+ 星,图啥都不图,只办一件事:把 Win11 里那批你卸不动、关不了、日日硌应你的破烂,一回收拾利索。 1️⃣ 预装软件、推广插件,成批撵走 2️⃣ 遥测、广告 ID、个性化追踪,悉数掐断 3️⃣ Copilot、Recall、Click to Do 这类 AI 功能,连根薅掉 4️⃣ Bing 网页搜索、Edge 内嵌 AI,统统封掉 5️⃣ 顺带还能把 Win10 的经典右键菜单召回 MIT 开源,白使,不带捆绑,也不偷摸追踪。 最打脸的一点是,微软耗了这么多年,把 Windows 捯饬成广告口、搜索口、AI 口,结果这脚本一行指令下去,它又变回一台老老实实的电脑。 微软前头塞,社区后头删。 🔗 github.com/Raphire/Win11Debl…
40
359
8
2,160
130,906
eleven red pandas retweeted
Police Squad! was cancelled after just six episodes. ABC claimed the humour was too dense and fast-paced for ’80s viewers to follow. TV Guide called it “the stupidest reason a network ever gave for ending a series.” The Naked Gun movies reused many of the same gags and made $477M
297
1,309
107
10,536
341,681
eleven red pandas retweeted
Italian firm Dataflow Security, founded in 2019 by young hacker Luca Todesco, develops high-value exploits: including zero-click tools that break into computers and smartphones and has grown rapidly into a multimillion-euro supplier for governments and spyware makers. An investigation shows deep ties to Israel’s intelligence and military-cyber world: former senior Mossad official Eyal Tsir Cohen (shortlisted in 2025 to lead Shin Bet) now heads its two Israeli subsidiaries, while staff include veterans of Unit 8200 and former NSO Group employees. #osint irpimedia.irpi.eu/en-inside-…
6
54
5
304
82,540
40 лет назад погиб Клифф. Человек, который в общем-то и научил Металлику играть музыку.
10
24
215
9,327
eleven red pandas retweeted
InjectSetConsole performs process code injection by leveraging a Windows named pipe. Unlike traditional techniques, it does not use the VirtualAllocEx and WriteProcessMemory APIs. #securityblog #cybersecurity zerosalarium.com/2026/09/edr…
1
12
1
80
7,752
eleven red pandas retweeted
iMessage EXR. zero click. heap overflow before the banner finishes. CVE-2026-86869. libAppleEXR sizes the buffer for 3 channels. 12 bytes. CompressedInterleave4 writes 4. 16 bytes. every pixel. three of those four bytes come from the file. BlastDoor never decodes EXR. Spotlight and the photo indexer do, later, with SDR hardcoded on. no tap. same ImageIO path on iPhone, iPad, and Mac. fixed in the 27 releases. older fleet still sits on it. credit: Niels Hofmans / ironPeak ironpeak.be/blog/ex-arrr-sai… #iOS #ExploitDev #InfoSec
12
30
3
202
20,402
eleven red pandas retweeted
Kernemul: Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets. This can run on multiple host operating systems, such as Windows or Linux. AI was used for assisting development in this project, including the kernel handler implementations by noahware. Github: github.com/noahware/kernemul
3
14
166
8,214
eleven red pandas retweeted
装虚拟机最烦的不是系统本身,而是一堆配置项。 Quickemu 直接把流程简化了: 1️⃣ quickget 自动下载系统镜像并生成配置 2️⃣ quickemu 根据电脑硬件自动调整虚拟机参数 Windows、macOS、Linux 都能跑,官方还覆盖了大量系统版本,Win11 的 TPM 2.0 也不用自己折腾。 想测试其他系统,基本一条命令就能开搞。 Linux 用户可以收一个👇 🔗 github.com/quickemu-project/…
14
24
135
7,911
eleven red pandas retweeted
别再买昂贵的显卡了,这个项目把手头闲置的手机、平板、电脑组成一个 AI 计算集群 在GitHub 已斩获 4w+star 它把你所有设备的算力统一成一块虚拟 GPU,iPhone、iPad、Mac、树莓派,只要接在同一个局域网里就行 不用手动配置,自动发现节点,p2p 直连,所有推理都在本地跑 它会根据每台设备的实时性能和网络状况决定怎么切分模型,确保整体推理速度达到最优 有人实测用 4 台 M3 Ultra Mac Studio 跑起了 DeepSeek v3.1 671B,支持 RDMA over Thunderbolt 5 之后多机延迟降了 99%
7
43
3
334
28,580
eleven red pandas retweeted
Bunu görmeyen var mı? Dünyanın sonu geldiğinde kullanabileceğimiz bir repo çıkarmışlar. Survival computer İnternetsiz çalışan, içinde AI + Wikipedia + haritalar olan tam bağımsız bir bilgisayar sistemi. - Her şey lokalde çalışıyor (cloud yok, veri gönderme yok) - Tek komutla kuruluyor - Tarayıcıdan yönetiliyor - Aynı ağdaki tüm cihazlardan erişilebiliyor 👉 github.com/Crosstalk-Solutio… Umarım kullanmak zorunda kalmayız.... ----------------- Yapay zeka hakkında güncel kalmak için 👉 bakigul.substack.com
37
520
16
3,872
285,933
eleven red pandas retweeted
deGDID: Deletes all instances of Microsoft's GDID and prevents minting of new ones GitHub: github.com/yegors/deGDID
8
77
3
751
38,798
eleven red pandas retweeted
Fileless ELF Execution via O_TMPFILE (@MatheuzSecurity) matheuzsecurity.github.io/ha… #infosec
19
1
140
13,063
eleven red pandas retweeted
QNAP devices CGI handlers exploitation (CVE-2026-34007, CVE-2026-34008) runiclabs.io/research/qnap-a… #infosec
3
8
55
6,037
eleven red pandas retweeted
Exploiting CVE-2026-19174: integer overflow in V8 WebAssembly qedaudit.io/blog/brilliantly… Credits @0x10n #infosec
1
34
1
197
9,546
eleven red pandas retweeted
malware is living in .claude/ folders now 👀 Google's new threat report: a stealer dropping malicious configs into folders AI coding agents parse (.claude/ .cursor/ .vscode/) one injection there = your agent runs attacker commands, you never see it 💀 audit your agent dotfolders cloud.google.com/blog/topics…
7
95
4
356
25,804