Python (ab)user / Security / Windows internals / @ExaTrack
Joined June 2012
- Tweets473
- Following530
- Followers1.1K
- Likes1.2K
Pinned Tweet
I am sharing my Windows-specific #Python codebase: github.com/hakril/PythonForW….
It even has a documentation ! hakril.github.io/PythonForWi…
Clement Rouault retweeted
Le programme de BeeRump 2026 est disponible :
rump.beer/2026/category/prog…
N'hésitez pas à vous inscrire, il reste encore des places !
Clement Rouault retweeted
Pour notre première rump acceptée, @angel_killah nous parlera de reverse de jeu d'arcade dans sa rump "A practical example of how arcade games cheat you"
We are releasing a new method to collect the SRUM Windows forensic artifacts : github.com/ExaTrack/SrumQuer…
@ExaTrack, we have discovered a new method to retrieve the database via a srumapi!SruQueryStatsEx.
Thus, we share this method that we used for 2 years in our tools.
Clement Rouault retweeted
Discover a new linux backdoor hidden for 10 YEARS in a critical HTTP server, waiting for a "magic packet" to wake up.
Undocumented TTP. Full report: blog.exatrack.com/Butoflex%2… #Malware #ThreatHunting #Cybersecurity @ExaTrack @LoginSecurite
Clement Rouault retweeted
🚀 Take your malware analysis skills to the next level with Exalyze
Discover our unique capabilities to compare malware code with our entire database, identifying similar samples and uncovering hidden connections.
👉 exalyze.io
@Exalyze_io
Clement Rouault retweeted
🚨 WARNING: A fake domain—cff-explorer[.]com—has been registered to distribute malware. It currently appears as the top Google result when searching for "CFF Explorer". The only legitimate domain is ntcore.com.
Clement Rouault retweeted
"A calculator app? Anyone could make that."
Not true.
A calculator should show you the result of the mathematical expression you entered. That's much, much harder than it sounds.
What I'm about to tell you is the greatest calculator app development story ever told.
Clement Rouault retweeted
For the first time, our training "Bug Hunting in Hypervisors" is open to the public at @reconmtl !
Designed for security researchers,we will dive into VM escapes, hypervisor attack surfaces, and real-world exploitation.
More info: recon.cx/2025/trainingBugHun…
Clement Rouault retweeted
The second part of my #WinDbg deep-dive into the #Windows #bootloader is up: Get ready for a decades-old registry structure, unique sorting algorithms, and lots of corner cases. The result is a modern Rust replacement for Mark Russinovich's LoadOrder tool: colinfinck.de/posts/nt-load-…
Clement Rouault retweeted
Yes, PDF runs DOOM! th0mas.nl/downloads/doom.pdf
(PDFium only for now)
I wanted to know how WMI Win32_OperatingSystem.Caption get the correct Version number (ex: "Microsoft Windows 11 Pro").
Turns out it's a DLL export: winbrand!BrandingLoadString.
And there is a patent for that : patentimages.storage.googlea…
I just reached 600 stars on PythonForWindows ! \o/ github.com/hakril/PythonForW…
Clement Rouault retweeted
3+ YEARS of stealth! We uncovered new tactics used by the perfctl malware, including a userland rootkit & an SSH backdoor (a single SPACE in /etc/passwd!). More insights: blog.exatrack.com/Perfctl-us… #cybersecurity #threat_hunting #linux #infosec #perfctl #rootkit #ssh #exatrack