Fuck softwares, silicon is better than anything and deeper than any ring. Dev @ Stella | Behind Window 0
France
Joined July 2023
- Tweets52
- Following46
- Followers64
- Likes19
htdf retweeted
Unfortunately, it’s a manual, not a detection. We still have multiple Radiant accounts active. We can prove it. We’ll see how big of a problem this becomes, considering it’s WAY cheaper than Heino and HPTT.
First units arrive in ~14ish days. 😝
P.S Thanks for the promotion.
htdf retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
^ CN-ACE is untested on Version 3, but it most likely works there. If there’s a Chinese reseller here interested, the device can be provided to you with early access.
Discord : discord.gg/mMbKZhshBp
Are you sure about that ? 😂😂
Game: CS2
AC: FACEIT
FACEIT’s anti-cheat was independently audited by @intorqa, a game security company specializing in anti-cheat research.
The audit found no confirmed DMA bypass during the review period and concluded that FACEIT remains one of the hardest anti-cheat systems to bypass.
htdf retweeted
Rust + C & BoF of this will be releasing this weekend along with the blog post. Extraction part of poc is ready but I'm working on the patch mechanism ( The main thing) .
Studying the TPM EK validation, if we somehow extract the EK private key from the hardware TPM we can fully impersonate the device identity toward the server checks.
Finding alternate method to do this to pass the checks =)
ALT BoF version of the extraction. for full extraction you can use get_guid --full Tested in VanguardC2. An software for advance red team and adversary engagements & with dynamic profiles & unwindable legitimate call stack support with CET & Auto-Cmd mode for automation.
htdf retweeted
If you want to learn malware reverse engineering and have no idea where to start, this is it. RE101 takes you from zero to reversing real Windows malware. RE102 covers anti-RE techniques, encryption, VM evasion, and packing. PE Injection Study walks through extracting process injection techniques from Cryptowall. macOS workshop covers Mach-O headers, code caves, and dynamic library injection.
Hands-on labs. Downloadable VMs. Real malware samples. IDA Pro cheat sheet included.
Free. No paywall. No signup.
malwareunicorn.org/#/worksho…
Author: @malwareunicorn
#MalwareAnalysis #ReverseEngineering #InfoSec
Idk what to say, just look🤷♂️
New dma hardware dropping soon, link in bio, supports IOMMU pop up or any iommu shit they can do, any elo, any anticheat, any game
high elo game ofc
fuck u @FACEITcs @FACEIT_Darwin @ItsGamerDoc
htdf retweeted
The 'world's biggest' cheat operation made $76 million selling cheats for Overwatch and Call of Duty Mobile before Chinese police and Tencent shut it down. Tencent also owns Riot Games.
The Vanguard anti-cheat team are some of the best security engineers in the industry.
These are the assets seized. Lamborghinis paid for by gamers buying aimbots. Cheating is not a hobby. It is a criminal enterprise. This is why kernel anti-cheat exists.
@AntiCheatPD @riotgames @PlayVALORANT
bbc.com/news/technology-5657…
#AntiCheat #GameSecurity #InfoSec
UEFI bootkits are no longer theoretical. BlackLotus. HybridPetya. CosmicStrand as demonstrated by the "Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats" by @matrosov
Researchers demonstrated the same class of technique against VBS enclaves, the most isolated execution environment Windows offers.
Hooked GetVariable(). Intercepted BlLdrLoadImage(). Injected into hvax64.exe before VBS initialised. Owned the VM-exit handler at ring -1. Read and wrote VTL1 enclave memory directly from the hypervisor.
If your threat model stops at ring-0, it stops too early.
Full PoC included.
tulach.cc/using-vbs-enclaves…
tulach.cc/from-firmware-to-v…
Author: @tulachsam
#Malware #Infosec #ReverseEngineering
Cracked EXM tweaking app, easier than Paragon (lol).
Don't spend money for this shit it's 95% placebo as usual.
DM me for crack file.
Next time tell AI to not make everything client-side.🔥
