citronneur

10 ms·

1. 1.▲
   Show HN: Applying yara rules on Time Travel Debugging traces(github.com)

   3 points by citronneur 3y ago|0 comments
2. 2.▲
   Time Travel Debugging IDA plugin v1.1.0(github.com)

   1 points by citronneur 3y ago|1 comments
3. 3.▲
   by citronneur 3y ago

   ttddbg 1.1.0 is out with new tracing feature ! Based on #IDA database, arguments and return value are pretty-printed !
4. 4.▲
   Show HN: Reverse eBPF Using Ida Pro(github.com)

   3 points by citronneur 4y ago|0 comments
5. 5.▲
   by citronneur 4y ago

   Impressive works, It allows you to knock on 80 and 443 ports without drivers!
6. 6.▲
   by citronneur 4y ago

   I made a little fix, if you want to retry
7. 7.▲
   by citronneur 4y ago

   Lateral movement for example
8. 8.▲
   by citronneur 4y ago

   You have also https://github.com/pathtofile/bad-bpf or https://github.com/Gui774ume/ebpfkit which are good references also
9. 9.▲
   by citronneur 4y ago

   You need uretprobe but also need to read an arg by ref so no I don't think so... But thanks for the tip
10. 10.▲
    by citronneur 4y ago

    Thanks I will check that!
11. 11.▲
    by citronneur 4y ago

    Thanks!
12. 12.▲
    by citronneur 4y ago

    thanks !
13. 13.▲
    by citronneur 4y ago

    Yes we also use for https://github.com/airbus-cert/dirtypipe-ebpf_detection which is a dirtypipe detection program!
14. 14.▲
    by citronneur 4y ago

    Exactly, we have to found the address to hook on the system, so we need the path of the currently use of libpam by other process
15. 15.▲
    Show HN: Credentials dumper for Linux using eBPF(github.com)

    235 points by citronneur 4y ago|50 comments
16. 16.▲
    Show HN: Load Any Beacon Object File Using Powershell(github.com)

    2 points by citronneur 5y ago|0 comments
17. 17.▲
    by citronneur 11y ago

    Planned in next release
18. 18.▲
    by citronneur 11y ago

    An exemple of node-rdpjs -> https://github.com/citronneur/mstsc.js
19. 19.▲
    Show HN: Mstsc.js a Pure JavaScript Remote Desktop Client(lc.cx)

    2 points by citronneur 11y ago|0 comments
20. 20.▲
    Show HN: Remote Desktop Protocol in Node.js(lc.cx)

    140 points by citronneur 11y ago|28 comments
21. 21.▲
    RDPY 1.3.0: Remote Desktop Protocol in Python Now Support NLA Authentication(github.com)

    3 points by citronneur 12y ago|0 comments
22. 22.▲
    RDPY 1.2.2: RDP tools in python (client, honeypot, MITM proxy)(github.com)

    4 points by citronneur 12y ago|0 comments
23. 23.▲
    Show HN: Guitar Tuner in HTML 5 and WebAudio API(github.com)

    1 points by citronneur 12y ago|0 comments
24. 24.▲
    Show HN: RDPY–MITM Proxy, Honeypot, Play with Microsoft Remote Desktop Protocol(lc.cx)

    15 points by citronneur 12y ago|1 comments
25. 25.▲
    Show HN: RDPY – Microsoft Remote Desktop Protocol in Python(github.com)

    6 points by citronneur 12y ago|1 comments