New video blog post "Maldoc with DOSfuscation" videos.didierstevens.com/2018/08/19/mal…

Bypassing static AV detection is easy. Bypassing dynamic AV detection can be tricky, but I've found simple solutions work best. The biggest hurdle is figuring out what behavior is being detected and how it is being detected. A little RE of your own payload and AV goes a long way.

Frida 12.8 is out 🎉 Not only can NativeFunction calls be followed with ability to mutate their instruction streams on a per thread basis, but also ObjC and Java calls. We now also support direct memory access through brand new ArrayBuffer APIs. frida.re/news/2019/12/1…

Finally! What took these guys so long to write it?! 😁

Interesting analysis by Didier Stevens on MS15-034 with a POC Exploit from a Excel Spreadsheet. Patch Immediately. blog.didierstevens.com/2015/04/23/ms1…

Been long awaiting this book release! x.com/zurbfoundation…

A new tool’s been released to help you decide whether to use a service, provider, or factory in Angular.js.

Anyone else excited for BlackHat/Defcon?

Off to #hushcon. Hit me up if anyone wants to meet up and grab drinks.

Looking for a ShmooCon ticket if anyone has an extra or can't make it.

Friendly #DEFCON reminder: DC24 Call for Papers & Workshops close May 2! defcon.org #CloserThanYouThink

sadlock.org another #WolfBug

Thank you Frontier Internet for the shitty 8MB up/down speeds today. Truly glad I ran a speed test. Always a surprise with you. #NotPaying

500+ GH/s on NTLM? Too easy with hashcat + 8x GTX 1080 Ti in the latest #Brutalis from sagittahpc.com gist.github.com/epixoip/ace60d…

I need to GO get this: nostarch.com/blackhatgo cc tomsteele CP Peanut Quorum

Our own Ryan Hanson #pwnie award! Optiv take notice x.com/pipefish_/stat…

Check out this badass privesc write-up by Ryan Hanson . Nice work! x.com/Atredis/status…