n3r
7.1K posts
n3r
@6E3372
if your dna was programmed in C, it would have a pointer to my heart
somewhere Katılım Aralık 2018
157 Takip Edilen186 Takipçiler
Found my 2nd high severity bug this month, time to finish up the report on a weekend😈Crazy how much AI can help when you're exploring a whole new field...
English
GIF
Indonesia
The Malaysian programming language!
Boleh lang broooo
Foxy@3ch0W15p
this was forwarded from my peers and I have to share it with you guys too xD bolehlang.dev
Indonesia
#SideWinder APT recently targeted a Malaysian org with a tax‑themed phishing email. The infection chain leveraged WinPTY to execute malicious PowerShell commands, delivering payloads such as TSM (RMM) and MANC.exe (non‑exhaustive list).
FYI @salmanvsf
English
Jikalau u guys ada dpt email sebegini, please berhati-hati dan double check dahulu.
Jgn sesekali tekan link atau download attachment yg diberi‼️
Mentang2 tgh musim lhdn ni😮💨
Szabolcs Schmidt@smica83
'Dokumen_cukai.zip' seen from Malaysia @abuse_ch bazaar.abuse.ch/sample/eff8146… C2 IP FUD: 103.214.172(.)14
Indonesia
n3r retweetledi
Vibecoded another side project related to YARA for fun.
It has features such YARA scanner to scan folders/files using collected public rules, editor and tester, collector, YARA generator using YarGen, and YARA search.
github.com/fareedfauzi/YA…
English
n3r retweetledi
Got my first Chrome CVE!
This was surfaced by my agentic pipeline, though the PoC was put together with a bit of manual work, AI, and a lot of digging through similar older reports and commits, since it was my first time and I honestly did not understand much of the codebase or how a PoC was supposed to be done for this case initially.
I’ve also had a few other CVEs surfaced by my pipeline over the past few months, and I might write about those some other time
English
n3r retweetledi
Had too many AI tokens, so I vibe-coded a Malaysia Web Defacement Observatory.
It visualizes scraped Malaysian web defacement data, with the entire pipeline running on GitHub:
- GitHub Actions -> data processing
- JSON metrics generation
- GitHub Pages -> dashboard
Check it out:
observatory.kampung.digital/malaysia-defac…
English
Speaking about AI in reversing, I'm developing (vibe coded) an IDA plugin that can rename all functions/variables in bulk, analyze each of those functions, & produce summary of all analyses of the call-tree. The plugin not replacing us, but assisting reversers in their work.
English
n3r retweetledi
Dissecting a GenesisStealer Campaign Hiding Behind Indie Game Branding
badrulmunir.com/posts/analysin…
English