So what do LLMs mean for software security? Here #ChatGPT is decompiling assembly into C.
(Credit: @spimescape & @moyix).
Prompt: What does this code do?
push rbp
mov rbp, rsp
mov DWORD PTR [rbp-4], edi
mov eax, DWORD PTR [rbp-4]
imul eax, eax
pop rbp
ret
Response:
Whitehat satya0x reported a critical vulnerability in @wormholecrypto on Feb 24 via Immunefi.
The bug was quickly patched, no user funds were affected, and satya0x received a $10 million payout from Wormhole, the largest bounty payout on record.
medium.com/immunefi/wormh…
Happy to announce that our talk 'PIC Your Malware' was accepted @BruCON! @thefLinkk and @b00n10 will share their experiences on leveraging fully position independent code to avoid suspicious memory artifacts & other useful techniques to stay under the radar of EDRs & BlueTeams 😎