Ling

We’re releasing our analysis of ring-1.io, a major game cheat targeted by multiple studios in recent legal actions. We partially deobfuscated several Themida-protected components and document how it hijacks Hyper-V to inject and manipulate game code. back.engineering/blog/04/02/202… github.com/backengineerin…

May I present to you; a full copy of doom, running inside of a Rollercoaster Tycoon 1 save game exploit ✨ Thanks for everyone that came to check out our @DistrictCon Junkyard talk! We had a lot of fun putting it together. (check the thread for slides / exploit)

@zemnmez Does it need source or does it also work on binaries without any additional (debug) info?

you can throw aardvark at a graphics driver just as much as you can throw it at a roblox gameserver and it will discover the kind of logic vulnerabilities that are out of reach for symbolic analysis, static analysis or formal proof systems

the experience of using openai aardvark has been at times viscerally strange. the bugs it produces are sometimes those a human would find, and sometimes they leverage a meticulousness and deep and broad understanding that feels totally alien. it’s a new day.

@stupidtechtakes ballcrusher

@_bradan conratulations son, i am very proud of you

excited to announce ill be starting a new position as a webshell engineer at a new chinese startup! excited to see what the future holds 🚀🤯

@SwiftOnSecurity I still have some of these saved from years ago

Forgot I made this like 8 years ago

@CryptoGangsta @OneCloudEmoji What was your go-to tool(s) for doing mitm and messing with packets?

@OneCloudEmoji It really depends on what you wanna do. Most older games on GOG have zero DRM and can be messed with using the Cheat Engine. If you wanna do more advanced things, Guided Hacking is generally the standard here. A lot of what I did was mitm and then mess with the packets to server

7 games now, some games take longer than others to get released. I miss game hacking :(

@zemnmez you were smurfing on the karaoke fr

here’s me singing ‘pink pony club’ at the last hack fortress CTF at the last shmoocon youtu.be/SikCjnS7xrg?t=…

mvm

Happy new year! Our 2024 Recap is here: - 6 CTFs won, including 2 DEFCON Prequalifiers - 1st meetup of ~80 members @ DEFCON - 19.5k mvms sent on Discord - Rank #2 global on CTFtime We're incredibly proud of all of our members and look forward to seeing everyone again next year!

@_mixy1 where can i buy mvm merch?

mvm

@qkaiser That talk got cancelled

Anyone attended this talk at DEFCON this year ? Was it actually held ? Is the author on Twitter ? I have so many questions. infocondb.org/con/def-con/de…

Excited to share my latest blog post: "Breaking Control Flow Flattening: A Deep Technical Analysis" I showcase usage of formal proofs and graph theory to automate CFF deobfuscation, among other things ! Might make it a talk...? 👀 zerotistic.blog/posts/cff-remo…

@thatjiaozi i believe

I want to find a vm escape vuln by before eoy. With my tight schedule it sounds impossible but make your bets…

Valorant is winning the war against PC gaming cheaters. I've interviewed Riot Games' head of anti-cheat and it's clear that the investment into its Vanguard system is really paying off. Full interview below 👇 theverge.com/2024/11/4/2428…

@zemnmez real trainmaxxing hours

i know its not a smart thing to do but i want to start with trans that have 1 loco and 12 cars

i've been playing space age on a newly minted "train world" where the resources are rich but sparse and what they don't tell you about that is that it also has to be a car world because i have to go on long road trips to find anything to build rail to

@_bradan alleged: 1.88m actual: 1.72m

Item #: SCP-420 Object Class: Keter Description: SCP-420 is a humanoid creature measuring approximately 1.88m meters in height. Subject is known to stay inside all day. Upon interacting with SCP-420, it will show the person interacting with it a monkey GIF.

(1) Decided to release the source code for my LLVM-based static binary analysis framework (github.com/Colton1skees/D…). It implements, among other things, an iterative control flow graph reconstruction algorithm heavily inspired by SATURN, using Remill and Souper.

mvm

@aris_ada @fred2k @taviso If the issue really was reading uninitialized data like Tavis pointed out, I doubt Rust would have helped in this scenario. Unless it does additional checks, like checking for unmapped memory, that I'm not aware of

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n