Pinned
I'm finally releasing a project that I've been working on for a little while now. Here's Boflink, a linker for Beacon Object Files. github.com/MEhrn00/boflink
Supporting blog post about it. blog.cybershenanigans.space/posts/boflink-…
Matt Ehrnschwender
@M_alphaaa
Security person who likes writing code
Joined August 2020
- Got a "Hello World" PE file down to 620 bytes using regular tooling without handcrafting it. Could probably get it a little bit smaller by swapping out DLL imports for syscalls gist.github.com/MEhrn00/d77bd6…I'm sorry but 1024 bytes for an x86 Hello World PE is still way too big and bloated...
- Oh... well that's not good🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios
- I keep on forgetting how much of a joke C development is on Windows. They want to use wide strings for everything but can't even write a 'wprintf' function that works correctly. glibc on Linux and MinGW's ANSI stdio are right but ucrt is just broken
- The notepad vulnerability reminds me of this post on how you can embed file:// URIs in OSC8 escape sequences x.com/taviso/status/…. Attempting to use procmon from sysinternals does not work throughAnyone else seeing that this hasn't been patched yet? Same for [clickme](file://live.sysinternals.com\tools\procmon.exe). Notepad.exe still at version 11.2510.14.0 for me.
