Tu Tri Mi retweeted
If you have ever wanted to learn reverse engineering but had no idea where to start, this is probably the best free series out there.
Applied Reverse Engineering by @daaximus covers basic architecture, the stack, exceptions and interrupts, x64 assembly, control-flow tracing, and more still coming including hooking techniques, ROP, heuristic analysis, and C++ class reconstruction.
Written for people who have opened a debugger a handful of times and got lost. Starts from zero and actually makes sense.
revers.engineering/applied-r…
#ReverseEngineering #WindowsInternals #InfoSec
Tu Tri Mi retweeted
How PatchGuard detects hypervisor-based hooks. Written by two Riot Games Anti-Cheat Engineers. Some of the most underrated researchers in the Windows internals and kernel/hypervisor security space.
Microsoft embedded multiple detection techniques inside PatchGuard to catch hypervisors hiding the real LSTAR MSR value. Trap flags, MOV SS tricks, ICEBP edge cases, LSTAR shadowing, and deliberately triggered page faults that expose the real syscall handler address.
Part 2 includes a custom detection technique with a full working PoC.
Part 1: revers.engineering/patchguar…
Part 2: revers.engineering/patchguar…
PoC: github.com/ajkhoury/Errata13…
Authors: @nickeverdox @aidankhoury
#WindowsInternals #ReverseEngineering #AntiCheat
If you have ever wanted to learn reverse engineering but had no idea where to start, this is probably the best free series out there.
Applied Reverse Engineering by @daaximus covers basic architecture, the stack, exceptions and interrupts, x64 assembly, control-flow tracing, and more still coming including hooking techniques, ROP, heuristic analysis, and C++ class reconstruction.
Written for people who have opened a debugger a handful of times and got lost. Starts from zero and actually makes sense.
revers.engineering/applied-r…
#ReverseEngineering #WindowsInternals #InfoSec
Tu Tri Mi retweeted
this PhD student had 47 interviews and 4 offers before she was hired at OpenAI.
she practiced with her “notes on LLMs” and math and they’re a goldmine. super concise and organic and shared to everyone for free. you can use her notes or her topic list to study on your own.
I'm joining OpenAI next week!🥹 The job search turned out to be really challenging but also super rewarding, so I wrote a small blog to share what I learned along the way and hopefully make the process a little less mysterious for the next person. alisawuffles.github.io/blog/…
Tu Tri Mi retweeted
MICROSOFT OPEN-SOURCED A PII DETECTION SDK
presidio detects and anonymizes sensitive data before it ever touches your model
the problem is real: names, emails, SSNs, credit cards, medical records all flowing through LLM pipelines unfiltered
presidio stops that
▫️ detects PII in text, images, and structured data
▫️ redacts, masks, or anonymizes before it hits the model
▫️ supports NLP, regex, rule-based, and transformer detection
▫️ runs on Python, PySpark, Docker, and Kubernetes
▫️ even handles DICOM medical images
in an era of GDPR, HIPAA, and AI compliance audits, this is infrastructure not optional
github.com/microsoft/presidi…
Tu Tri Mi retweeted
♟️ What's an Agent ID compromise look like? This post shows how compromise of a blueprint can lead to compromise of ALL its agents, including those in another tenant:
securitylabs.datadoghq.com/a…
Tu Tri Mi retweeted
Researcher found a design flaw in EasyAntiCheat's driver that allows injecting and executing unsigned code inside any EAC-protected game process. Even with HVCI and Secure Boot enabled.
Covers how EAC bridges between the kernel driver and the game's modules and how a flaw in that bridge gives unrestricted code execution.
Post is from 2021 but the design patterns in anti-cheat service initialization remain relevant.
Blog: back.engineering/blog/10/08/…
Video: youtube.com/watch?v=Q2kDhvhA…
Authors: @sinclairq8 @_xeroxz
#AntiCheat #ReverseEngineering #InfoSec
Researcher bypassed EasyAntiCheat's driver self-integrity using a hypervisor-based debugger with EPT to trace the integrity check routine, Capstone disassembly framework to analyze the driver, and ZwQuerySystemInformation to locate the checksummed pool copy. Patched both the original and the copy. Integrity checks disabled entirely.
Once bypassed, any EAC code can be hooked or patched without triggering a kick or ban.
Post is from 2020 but the underlying techniques still apply. Kernel pool manipulation, hypervisor-assisted debugging, and driver integrity analysis remain fundamental to anti-cheat research.
Author: @iPowerPower @the_secret_club
secret.club/2020/04/08/eac_i…
github.com/thesecretclub/CVE…
#AntiCheat #ReverseEngineering #InfoSec
Tu Tri Mi retweeted
If "how V8 handles parsing" is on your mind, I would start with these - great resources.
Part 1 - v8.dev/blog/scanner
Part 2 - v8.dev/blog/preparser
Tu Tri Mi retweeted
CloudFox 📍
It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure.
Source: github.com/BishopFox/cloudfo…
Tu Tri Mi retweeted
An Introduction to Programming with Threads by Andrew D. Birrell (1986)
birrell.org/andrew/papers/03…
Tu Tri Mi retweeted
Huberman interviewed Michael Easter on the comfort crisis.
The scariest part:
A life with no hard things trains your brain to fear everything.
[Your memory center gets weaker & emotions become harder to regulate]
Here are 7 hard things that can recalibrate your brain: 🪡
1. Do one thing every day you might fail at.
Tu Tri Mi retweeted
Intercepting Unencrypted Satellite Communications
Passive GEO interception station is no longer something limited to intelligence agencies. It is now accessible to technically curious RF people with moderate budgets.
Because this has been known for decades, you'd naturally expect strong encryption to be the norm.
Yet for many non-broadcast data channels, especially internal IP backhaul links, encryption has historically been neglected.
We showed how widespread that neglect really is
Part 1: hackers-arise.com/satellite-…
Part 2: hackers-arise.com/satellite-…
@three_cube
Tu Tri Mi retweeted
For anyone who missed the talk and would like to watch it, it is now publicly shared.
youtu.be/3YbwmBW4wIA?is=VDWw…
Tu Tri Mi retweeted
This is an approach I personally have used, and it works great! I did this with my SDRplay RSP2 and my ICOM 705. One of the great things about this approach is that you can set up PSTrotator for Doppler on both SDRplay and the ICOM 705. I did a YouTube video on this several years ago. Let me see if I can find it...Here it is, albeit eight years old. This is a great way to operate full duplex on the satellite, so you can hear your own downlink!:
youtu.be/Lk4LZCyPplA?si=Hath…
Tu Tri Mi retweeted
Observed newer #PureRAT
blog.lukeacha.com/2026/06/pu…
PYC file execution after reboot (Run Key) >
Multi-Stage PYC with Base85 + Zlib + RC4, XOR, AES >
Shellcode > .NET with multiple protections, and more embedded .NET binaries.
Tu Tri Mi retweeted
🐍 Learn how to Use Medusa for Fast, Multi-Protocol Brute-Force Attacks
Blog: freecodecamp.org/news/how-to…
#infosec
