Posts

🎂 It's Amir MS's birthday today

Image
  Paan, help Amir celebrate his birthday.                       Today is Amir MS's birthday!   Wednesday, May 31, 2023       Amir MS   42 years old   Help Him Celebrate             See Birthdays             Was this email: Useful | Not Useful             This message was sent to farhantd2016.sateyska@blogger.com . If you don't want to receive these emails from Meta in the future, please unsubscribe . Meta Platforms, Inc., Attention: Community Support, 1 Facebook Way, Menlo Park, CA 94025         To help keep your account secure, please don't forward this email. Learn more      

Fast Emulator For Shellcodes In Rust

Image
I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff. The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.   There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on. https://github.com/sha0coder/scemu In less than two seconds we have emulated 7 millions of instructions arriving to the recv.  At this point we have some  IOC like  the ip:port where it's connecting and other details. Lets see what happens after the recv() spawning a console at position: 7,012,204 target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204 In the console, pressing "enter" several times to emulate  step into several steps and we arrive to a return instruction. Let's see...

Najwa Hazim posted in BAZAAR MAKANAN ONLINE SUBANG JAYA

Image
See what she posted.       Najwa Hazim posted in BAZAAR MAKANAN ONLINE SUBANG JAYA May 30 at 4:50 PM   Assalamualaikum semua Berubah tempat is always for ...  See more   See 7 more   View on Facebook     Was this email: Useful | Not Useful     This message was sent to farhantd2016.sateyska@blogger.com . If you don't want to receive these emails from Meta in the future, please unsubscribe . Meta Platforms, Inc., Attention: Community Support, 1 Facebook Way, Menlo Park, CA 94025 To help keep your account secure, please don't forward this email. Learn more  

C++ Std::String Buffer Overflow And Integer Overflow

Image
Interators are usually implemented using signed integers like the typical "for (int i=0; ..." and in fact is the type used indexing "cstr[i]", most of methods use the signed int, int by default is signed. Nevertheless, the "std::string::operator[]" index is size_t which is unsigned, and so does size(), and same happens with vectors. Besides the operator[] lack of negative index control, I will explain this later. Do the compilers doesn't warn about this? If his code got a large input it would index a negative numer, let see g++ and clang++ warnings: No warnings so many bugs out there... In order to reproduce the crash we can load a big string or vector from file, for example: I've implemented a loading function, getting the file size with tellg() and malloc to allocate the buffer, then in this case used as a string. Let see how the compiler write asm code based on this c++ code. So the string constructor, getting size...