← Feed

Posts

• View post

  Do I look at Phorphiex next or DarkTortilla? DarkTortilla is calling out to me because of it's funny name.

• View post

  Failed someone in helping them out with malware because I don't know how to deobfuscate Java. Feels bad man. At least I have a sample to learn from.

• View post

  Feeling incredibly depressed right now. Oral corticosteroids are not like the euphoric infusions.

• View post

  Last night's brain vibes were so bad I felt no interest in studying malware. That's like my whole thing and I just felt nothing for it. Just went to bed. Truly bad vibes last night.

• View post

  Getting back to doing actual reverse engineering is like giving myself whiplash from the sudden speed change from just detonating samples in a sandbox and analyzing logs that come from it. I miss the reversing part though! Taking apart DonutLoader samples.

• View post

  The lingering side effects of the corticosteroids have me questioning if I'm a good reverse engineer. Apparently in the come-down cognitive side effects are apparent, hence why I've been having a hard time reversing. Apparently this will clear up eventually, but I need to attract businesses!

• View post

  God, why did I apply for a Forensics job? I barely remember forensics from my training! I need to brush up with LetsDefend challenges.

• View post

  Getting really tired of this depression. I hate getting pangs of negative thoughts and a lack of motivation to do anything constructive. I need to ask my psychiatrist for an adjustment.

• View post

  Hmm... ValleyRAT started getting wise to sandboxing and is querying Direct3D for the video card. I don't want to migrate my sandbox to my media center that has a video card, but I might have to eventually.

• View post

  I'm doing actual reverse engineering and I'm getting mad at my depression for telling me I can't do it. I can clearly do it, I won an award for completing a Flare-On competition! Fuck depression so much, it's a dirty liar.

• View post

  Just saw Hard Candy for the first time. That is a very cathartic movie for a certain audience. I loved it.

• View post

  A recruiter ghosted me this morning after waking me up early to await her call. I can see why my partner hates them so much right now.

• View post

  I'm happy to report that after my recent spat of MS attacks I can use chopsticks again! @Mirage made ramen and it was tasty.

• View post

  Puppy was wagging his little nub while I was making coffee, then leaned against my leg. I don't know why, but I appreciate the show of affection!

• View post

  Seeing a significant uptick in VShell campaigns on MalwareBazaar. I think I see an opportunity to report on this malware family!

• View post

  God the VShell crew is constantly updating their Go payload loader. Makes me annoyed since I was so accustomed to their current loader.

• View post

  VShell is fucking with me. It loads a position-independent shellcode with Go artifacts that loads from the DOS header that's also a valid PE file. I think it loads its Go runtime in the shellcode loading process. This is fun, but confusing!

• View post

  Has anyone else seen this before? Shellcode written in CGo that bootstraps a Go environment. I'm struggling to reverse the loader because I'm not very well versed in Go reversing. And before you ask, GoReSym is failing too! #malware #malware_analysis

• View post

  Major headway! I found the bootstrapping function where it eventually transfers to the pure Go routine. Now to find where it stored the pclntab.

• View post

  Updated my copy of GoReSym, magically recovered more obfuscated symbols. Here I was banging my head against the wall because it kept saying it couldn't find the pclntab. I guess Mandiant is looking at the same malware I was!

• View post

  I'm so tired of applying to jobs and hearing nothing back. I feel like a bad candidate for everything. Very demoralizing.

• View post

  Gonna try freelancing, see if this leads to anything. Got a nasty virus and wanna know what it does? I'm offering my services for cheap to gain rep! https://www.upwork.com/services/product/2043959850762621529?open-share=1&frkscc=DBvPPUX5YAoT

• View post

  Trying out the whole vibe coding thing with local LLMs. If you don't pay enough attention to the diffs, it'll sneak bugs past you. I can see it's usefulness, but I can't imagine using LLMs without knowing how to code originally.

• View post

  Massive refactor of exe-rs in the works to deal with the new undefined behavior bug introduced by Rust 1.94. It was an unaligned mess and needed fixing.

• View post

  I have been won over by Claude code. You'll never sell me on ignorance-driven vibe code, but it's really helpful for finding and solving subtle bugs. It's like having a pair programming buddy.

• View post

  Does anyone know where a furry shitpost drawing is? It features a headshot of a dog with a collar that says "dog," then a dog without a collar that says "naked dog." I worry what might come up if I search Google Images for these search terms.

• View post

  Disappointed to discover the new show CIA is just coppaganda. Should have figured since apparently Dick Wolf is behind it. Season 2 of The Agency can't come fast enough.

• View post

  Paying off medical debt is so bittersweet. It's not an accomplishment, it's an albatross being finally released from your neck. Fuck this country so much,

• View post

  I've used Claude for a significant project while I'm disabled with an MS attack. While it is impressive, you lose a lot of the joy of coding and the memory retention you would get from coding it yourself. Reviewing diffs is not enough. AI haters win this round.

• View post

  The one thing I like about steroid infusion treatment for MS-- beside the healing properties-- is the optimism side effects. A role opened up in the Bay Area that's perfect for me and a recruiter is gunning for me for. I think we're gonna be okay.