flux (@0xfluxsec) 's Twitter Profile
flux

@0xfluxsec

Cyber professional (red team), security and systems programming | Rust | github.com/0xflux/ | fluxsec.red

ID: 1725592466387005440

linkhttps://fluxsec.red/ calendar_today17-11-2023 19:11:28

379 Tweet

337 Followers

705 Following

flux (@0xfluxsec) 's Twitter Profile Photo

Alt syscalls on W11 are not causing instability now I **think** I have isolated the issue. Still one last stability issue to close. No PatchGuard interference. HyperGuard.. I need to check (bricked my SecureBoot vm) - this is enough of a win for me to start writing it up :)

Alt syscalls on W11 are not causing instability now I **think** I have isolated the issue. Still one last stability issue to close.

No PatchGuard interference. HyperGuard.. I need to check (bricked my SecureBoot vm) - this is enough of a win for me to start writing it up :)
flux (@0xfluxsec) 's Twitter Profile Photo

Driver doesnt work as intended. Make very small change. 3 min reboot with debugger. Driver still doesnt work as intended. Make very small change. 3 min reboot with debugger. Repeat.. * in the case now where the driver cant be cleanly stopped

flux (@0xfluxsec) 's Twitter Profile Photo

Ok - pulling out all the args now (only showcasing for NtAllocateVirtualMemory). Here is the syscall hooks that I'm monitoring in the alt syscalls, bits in red is the process injection syscalls being caught. 1 last issue to fix, then I'll publish (hopefully later today)

Ok - pulling out all the args now (only showcasing for NtAllocateVirtualMemory). Here is the syscall hooks that I'm monitoring in the alt syscalls, bits in red is the process injection syscalls being caught. 

1 last issue to fix, then I'll publish (hopefully later today)
spencer (@techspence) 's Twitter Profile Photo

Imposter syndrome in cybersecurity is real. I heard this business guy Alex Hormozi say something that really changed my perspective on this… “You don’t need more confidence, you need more evidence.” 🫳🎤 That hits hard. In security, we often feel like frauds… not because we

flux (@0xfluxsec) 's Twitter Profile Photo

Working on handling Syscall events now with Alt Syscalls. I'm thinking along the lines of using WorkItem's to do post processing of syscalls as to not degrade system performance. The Work Item callback does successfully execute, which is pretty cool! ❤️‍🔥 driver dev

Working on handling Syscall events now with Alt Syscalls. I'm thinking along the lines of using WorkItem's to do post processing of syscalls as to not degrade system performance. The Work Item callback does successfully execute, which is pretty cool! ❤️‍🔥 driver dev
flux (@0xfluxsec) 's Twitter Profile Photo

Got back late last night from a holiday in the most beautiful part of Europe. Day off today, time to go fix an issue and discussion someone raised in my repo. Back at it. Sad to be home tho, it’s rainy and cold here 🥲

Got back late last night from a holiday in the most beautiful part of Europe. Day off today, time to go fix an issue and discussion someone raised in my repo. Back at it.

Sad to be home tho, it’s rainy and cold here 🥲
flux (@0xfluxsec) 's Twitter Profile Photo

I've rewritten my readme providing much clearer deployment instructions from a clean setup, made some improvements to the overall deployment process, and had a lot of cups of tea 😵‍💫 good progress today! github.com/0xflux/Sanctum/

flux (@0xfluxsec) 's Twitter Profile Photo

I've made a video on how to setup the Sanctum project based on a few people asking. Alt syscalls gives a bsod in 1 vm, but not the other (same kernel version) for a page fault. Doesn't appear to be Msft patching it, but it did work b4 a kernel update.. youtube.com/watch?v=BFbz6Z…

flux (@0xfluxsec) 's Twitter Profile Photo

Wanted to share this thing, sixtyvividtails crazy human brain tissue AI ?! has found the root cause for a BSOD. I replaced the old process & thread walk with a ref counted method, preventing a race condition. Thats wild yo Commit fixing the issue: github.com/0xflux/Sanctum…

flux (@0xfluxsec) 's Twitter Profile Photo

Been re-cookin' an old project from about 3 years ago recently. Originally written in Go and C - rewriting in Rust. Got a roadmap for various releases - thinking of open sourcing it when the first major milestone is met. Or maybe I wait for a more complete product. Idk 🤷‍♂️