Washi

261 posts

Washi

Washi

@washi_dev

Developer - Reverse Engineer - CTF player - Scrub. 🔧 I develop #AsmResolver, ✍️ blog at https://t.co/2WDyyrf4Rc, and sometimes 👾 hack with @Shellphish

McMurdo Station, Antarctica Katılım Ekim 2019
106 Takip Edilen1.9K Takipçiler
Sabitlenmiş Tweet
Washi
Washi@washi_dev·
Did you know you could write entire #csharp programs just by using the "await" keyword? OK, well not really, but I spent some weekends developing AwaitFuscator: A (dumb) #obfuscator that turns your #dotnet program into nothing but "await" expressions! 👉blog.washi.dev/posts/awaitfus…
Washi tweet media
English
5
33
134
25.3K
Washi
Washi@washi_dev·
@vinopaljiri Oh I'm not trying to downplay your research, just trying to explain one reason there may not have been the reaction you would've liked. The post didn't give us much to work with, so it's hard to have opinions about it as well. I'll wait for the full details in your release 😉
English
1
0
1
90
Jiří Vinopal
Jiří Vinopal@vinopaljiri·
I am just saying you are commenting like this kind of behavior is a result of some technique that would be known for many years. Still, I haven't seen such a thingie ITW so please I am here to learn... Tell me exactly, PoC, how I can blind even my main module visibility from Dnspy. Actually, I know it is in your power and knowledge to find out maybe not the same but some other technique, but please don't act like this is something we can see everyday... As we can't...
English
1
0
0
125
Jiří Vinopal
Jiří Vinopal@vinopaljiri·
I am not sure all people fully understood the technique introduced as I got a lot of some kinda of confusing direct DMs and the voting was also a hint that the "new generation" (please do not take it personally I am just too old sh*t... 😂) just didnt understand the impact and novelty - it is not meant to be offending to them as likely I did not clarify myself 100% clear, so...⬇️ This is fully 100% offensive research 💯, NO obfuscation, NO packing, just novelty in pure state and NO ntdll.dll ETW something patch etc... (so I dont understand the boring voting - maybe I should avoid the voting at all as it brought no meaningful results)...🤔 I cannot publish details yet, but this is not a code obfuscation technique, this is not know ITW technique (as far as I know) and likely you did not check the second half of the video - it is not about dynamic assembly/module loading or using reflection - that one is just for show case as normally the dnspy will break on those if module breakpoints are set... (which is the default option if module name is set set to "*" regex) It was just a showcased example that no mater if you are using dynamic assemblies/modules that are normally detected and allow to break on them in dnspy/dnspyex -> in the PoC they are ignored/silenced and it is not even possible to set basic breakpoints, modules view empty, etc... -> still everything executes normally... ...and It is just a beginning... this technique will result in full user-mode ETW blindness and bypass of .NET profiler API ➡️ TL:DR: NO dynamic analysis of .net PE sample...
Jiří Vinopal@vinopaljiri

Currently completing some pretty cool offensive .NET internals research (redacted for now...)🔥 Call me too excited, but I think this one's legit top-tier 🙃 I am super curious about your opinion → Vote below please 🤔 Quick teaser ➡️ Clean .NET sample vs technique applied, side by side in the latest #dnSpyEx: ✅ Clean: • Breakpoints fired • Break on Module/Assembly (Dynamic/Reflection) Load fired • Modules visible • Dynamic analysis intact ❌ Real PoC: • Empty module list • No Breakpoints fired • No Assembly/Module load events - ever • ETW (logman, PerfView) → completely silent • .NET profiler API (e.g. dotTrace) → native-only, managed code gone Managed runtime? ➡️ Unaffected (normal execution) Observers? ➡️ Totally deaf .NET PE Dynamic analysis ➡️ Dead, no ETW, no Managed debugger, no .NET profiler! Write-up coming. Am I too excited or does this slap? 👇 #dotnet #CLR #threatresearch #malware #exploit

English
5
3
23
3.1K
Washi retweetledi
Stormslayer -HD Remasters/Gamedev
TODAY IS LAUNCH DAY! The recompilation project Twilight Princess Dusk is available for download on ALL PLATFORMS. Windows, Linux, Android, iOS and more! Modding, High res textures support, unlocked framerates, new control schemes etc! Enjoy!
Stormslayer -HD Remasters/Gamedev@StormslayerDev

The PC port of Twilight Princess is near, its being shown playable, and was showcased on stream. It might just be days away from its final release. Twilight Princes Dusk is a native port for PC/Android/Linux/Mac and iOS. We are so close!

English
289
3.2K
21.6K
1.5M
Washi
Washi@washi_dev·
You can call me a "nerd" that's fine. Making a mistake is also fine! Unnecessary sensationalism is not fine. You have a big following. I'm asking you to be responsible with it.
English
0
0
9
528
Washi
Washi@washi_dev·
ILSpy does not and never has owned a WordPress. See github.com/icsharpcode/IL… Maybe consider verifying your "news" before spreading false information and fear mongering.
English
0
0
6
389
Washi
Washi@washi_dev·
@wieslawsoltes What's the point of this hostile attitude? We get it, you don't like the Avalonia maintainers or their decisions. But disagreeing with the core team and going your own way is also part of OSS. No need to be a crybaby because your issues/PRs did not get merged into the main repo
English
3
0
2
366
Wiesław Šoltés
Wiesław Šoltés@wieslawsoltes·
Imagine you could have had this in Avalonia, x:Bind, Hot Reload, Visual Designer, Live Tree Inspector, Source Generator Xaml Compiler, Inline C#, Interactive Preview and Editing, Optional xmlns, Property Editor, Conditional Xaml and way more.
Wiesław Šoltés tweet media
English
13
2
21
2.3K
Washi
Washi@washi_dev·
@EjetPhil @nafonsopt > You mean to say I need to know which distro works Not really, because FlatHub is the same for all major distros, no matter which one you pick. > windows installation is so simple What's the difference between clicking a button in the MS store vs one in the FlatHub store?
English
0
0
0
22
The Chicken Plug
The Chicken Plug@EjetPhil·
@washi_dev @nafonsopt "(which has a GUI on many distros,..." "On many distros" Which distros? Again windows installation is so simple, it's basically stupidly simple. You mean to say I need to know which distro works Not to mention the idea of many distros. Again simplicity wins everytime
English
1
0
0
19
Nuno Afonso
Nuno Afonso@nafonsopt·
For anybody saying "Just use Linux", you need to realise that Linux is worse than Windows. Windows has all the bloat, and while you can have Linux without any of that you still don't have tools like Remedybg, RAD Debugger and Super Luminal. Once you have such tools, then Linux is a suitable app development environment. But _it is still trash_ because of the whole Linux model of you needing to compile everything. The fact that you cannot run an app built using a newer version of glibc is an insane decision. I shouldn't have to upgrade my whole machine in order to run something built on a newer version. I shouldn't be worried that an upgrade will break my machine. I shouldn't be forced to compile things from scratch to work on my machine. I shouldn't be forced to install N packages, I just want self contained binaries I can just download and run. I shouldn't be forced to develop with an old distro to have "max glibc compatibility". I shouldn't have to worry about X11 / Wayland / Window Managers. I shouldn't have to worry about asking the user to select a folder, display a dialog or show notifications. Linux is such a huge waste of potential, if they got their shit together they would completely obliterate Windows. I first got into Linux in 2000, and even back then there was this "it will take over Windows any time now!". It's been _26 years_! The same way I'd pay quite a lot for Windows without any bloat, I'd be willing to pay for a distro that gives me all this.
Nuno Afonso@nafonsopt

Anybody who thinks that it is ok for telemetry to use 100% of your CPU should be fired immediately.

English
365
27
492
165K
Washi
Washi@washi_dev·
@EjetPhil @nafonsopt Noob tutorial: - Windows: Install from MS Store or download MyApp-setup.exe - Linux: Install from Flathub app store (which has a GUI on many distros, no terminal required) or download MyApp.AppImage. From a consumer perspective, it's the same principle, just different names.
English
1
0
0
49
The Chicken Plug
The Chicken Plug@EjetPhil·
@washi_dev @nafonsopt Which layperson knows all those words you just wrote. Even a technically savvy person will still struggle to get into Linux.. Which distro How to install apps on said distro Most tools are really not as good as people say. Meanwhile Windows, with all it's flaws is simple
English
1
0
0
24
Washi
Washi@washi_dev·
@nafonsopt What's the problem with appimage or flatpak for your use case?
English
3
0
1
405
Nuno Afonso
Nuno Afonso@nafonsopt·
As somebody delivering software for others, I have 2 choices: - provide source so that everybody can compile - provide binaries with old distros so that they target an older glibc for maximum compatibility Having packages in a package manager - which popup like mushrooms - means that _somebody_ has to compile them and set them up for others to use.
English
5
0
3
1.5K
Washi
Washi@washi_dev·
@IllusoryStudios @nafonsopt I don't know what else to tell you except that's just really misrepresenting the current state of affairs🤷‍♂️ Not saying you should switch. I just think you may be artificially limiting yourself to a really narrow perspective of .NET and MS, by sticking to what you're used to now
English
0
0
0
13
Washi
Washi@washi_dev·
@IllusoryStudios @nafonsopt It's fine if you just want to use tech X because you're more comfortable with it than tech Y. But let's not pretend it's an accurate depiction of the current state of .NET on all major platforms. Your setup with Mono/WinForms/GTK is not really the norm for xplat .NET dev anymore
English
0
0
0
22
Washi
Washi@washi_dev·
@IllusoryStudios @nafonsopt What is the downside of having one (UI) codebase for all major platforms, backed by a runtime that isnt going away any time soon? If it is legacy code, sure migrating is effort. But for new apps I don't see a real reason to use old unsupported tech in favor of new supported tech
English
1
0
1
27
Washi
Washi@washi_dev·
@IllusoryStudios @nafonsopt + You don't have to ship as a self contained app. If you are OK with Linux installing a runtime, then why not have your setup install the latest dotnet runtime?
English
0
0
0
36