Do It by Code
This assembly code has a segfault, if you can, fix it please: section .text global _start _start: mov rax, 0x00752076756c2069 push rax mov rsi, rsp mov rdx, 0x7 mov rdi, 0x1 mov rax, 0x1 syscall (those who fix it, don't send…
The issue:
lack of explicit exit.
when the process is getting terminated, you are going to get segfault, because the code does not terminate its execution, so the CPU just continues execution past the program itself.
Possible fixed:
adding these at the end of _start routine:
first solution:
or:
second solution:
==========================
can anyone say what is the difference between these two solutions?
lack of explicit exit.
when the process is getting terminated, you are going to get segfault, because the code does not terminate its execution, so the CPU just continues execution past the program itself.
Possible fixed:
adding these at the end of _start routine:
first solution:
mov rax, 60
xor rdi, rdi
syscall
or:
second solution:
mov rax, 60
mov rdi, 0
syscall
==========================
can anyone say what is the difference between these two solutions?
Valve somehow announced TF2 SDK for better mods + a lot of sources (for non-commercial use)!
Article, Comments
Article, Comments
SageMath
- GitHub repo
- Official tutorial
- some algebra examples
SageMath is a free open-source mathematics software system licensed under the GPL. It builds on top of many existing open-source packages: NumPy, SciPy, matplotlib, Sympy, Maxima, GAP, FLINT, R and many more. Access their combined power through a common, Python-based language or directly via interfaces or wrappers.
Mission: Creating a viable free open source alternative to Magma, Maple, Mathematica and Matlab.
- GitHub repo
- Official tutorial
- some algebra examples
Mouse Adventures Series
- Introduction
- Extracting the Firmware
- Writing a Disassembler
- Writing a custom tool
- Dumping and Parsing the USB Descriptors
- Enabling the Bootloader
- Writing an IDA Processor Module
- Dissecting the USB Code and Unbricking the Mouse
#Hardware #ReverseEngineering
An attempt to write a cross-platform tool that can manipulate "Tecknet Hypertrak Gaming Mouse" configurations without having to use the awful Windows-only tool it's shipped with.
- Introduction
- Extracting the Firmware
- Writing a Disassembler
- Writing a custom tool
- Dumping and Parsing the USB Descriptors
- Enabling the Bootloader
- Writing an IDA Processor Module
- Dissecting the USB Code and Unbricking the Mouse
#Hardware #ReverseEngineering
build a large language model "from scratch"
Article, Comments
https://github.com/controversy187/build-a-large-language-model
Article, Comments
https://github.com/controversy187/build-a-large-language-model
GitHub
GitHub - controversy187/build-a-large-language-model: Code samples from the book Build a Large Language Model
Code samples from the book Build a Large Language Model - controversy187/build-a-large-language-model
So, about the #ByBit hack that happened yesterday
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading operations. For exchanges, hot wallets typically contain only a small portion of their total assets (usually 5-10%) that's needed for day-to-day transactions and withdrawals.
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
In a multisig interaction there are 3 ways to get hacked:
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
Do It by Code
ETH be like: le code is law but when code is bad we rollback
The reason I said this:
around 6 years ago (2016), a major hard-fork happened in ETH network.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
around 6 years ago (2016), a major hard-fork happened in ETH network.
On June 17, 2016, the DAO was subjected to an attack exploiting a combination of vulnerabilities, including the one concerning recursive calls, that resulted in the transfer of 3.6 million Ether - around a third of the 11.5 million Ether that had been committed to The DAO - valued at the time at around $50 million.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
there isn't many more reliable news about this than what we already know tho.
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
They often develop their own malware and have their own set of tools and a team of specialists.
APT attacks are commonly attributed to a particular group based on the combination of the malware/tools used and the techniques used to deploy it. Some groups have their own custom malware that is only used by them, while others may use the same tools as other groups. Groups also differ in their choice of targets, attack techniques, and other factors. This means that, while the attribution of a cyberattack is never guaranteed to be correct, it is possible to identify the group behind an attack with high confidence.
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
Do It by Code
ByBit asked eXch to freeze the ETH that was stolen. eXch's response from their Bitcointalk thread 😬
Worren:
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
This media is not supported in your browser
VIEW IN TELEGRAM
Composio
Composio provides production-ready toolset for AI agents, offering:
https://github.com/ComposioHQ/composio
Composio provides production-ready toolset for AI agents, offering:
- Support for over 250+ tools across multiple categories: Software tools like GitHub, Notion, Linear, Gmail, Slack, Hubspot, Salesforce & more
- Comprehensive framework support including OpenAI, Groq, Claude, LlamaIndex, Langchain, CrewAI, Autogen, Gemini, and more
- Managed authentication supporting multiple protocols (OAuth, API Keys, Basic JWT)
- Pluggable architecture supporting custom tools and extensions
https://github.com/ComposioHQ/composio
RobotGo
Golang Desktop Automation. Control the mouse, keyboard, read the screen, process, Window Handle, image and bitmap and global event listener.
RobotGo supports Mac, Windows, and Linux(X11);
and supports arm64 and x86-amd64.
Example usage:
Golang Desktop Automation. Control the mouse, keyboard, read the screen, process, Window Handle, image and bitmap and global event listener.
RobotGo supports Mac, Windows, and Linux(X11);
and supports arm64 and x86-amd64.
Example usage:
package main
import (
"fmt"
"math/rand"
"github.com/go-vgo/robotgo"
"github.com/vcaesar/gcv"
"github.com/vcaesar/bitmap"
)
func main() {
opencv()
}
func opencv() {
name := "test.png"
name1 := "test_001.png"
robotgo.SaveCapture(name1, 10, 10, 30, 30)
robotgo.SaveCapture(name)
fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImgFile(name1, name))
fmt.Println(gcv.FindAllImgFile(name1, name))
bit := bitmap.Open(name1)
defer robotgo.FreeBitmap(bit)
fmt.Print("find bitmap: ")
fmt.Println(bitmap.Find(bit))
// bit0 := robotgo.CaptureScreen()
// img := robotgo.ToImage(bit0)
// bit1 := robotgo.CaptureScreen(10, 10, 30, 30)
// img1 := robotgo.ToImage(bit1)
// defer robotgo.FreeBitmapArr(bit0, bit1)
img, _ := robotgo.CaptureImg()
img1, _ := robotgo.CaptureImg(10, 10, 30, 30)
fmt.Print("gcv find image: ")
fmt.Println(gcv.FindImg(img1, img))
fmt.Println()
res := gcv.FindAllImg(img1, img)
fmt.Println(res[0].TopLeft.Y, res[0].Rects.TopLeft.X, res)
x, y := res[0].TopLeft.X, res[0].TopLeft.Y
robotgo.Move(x, y-rand.Intn(5))
robotgo.MilliSleep(100)
robotgo.Click()
res = gcv.FindAll(img1, img) // use find template and sift
fmt.Println("find all: ", res)
res1 := gcv.Find(img1, img)
fmt.Println("find: ", res1)
img2, _, _ := robotgo.DecodeImg("test_001.png")
x, y = gcv.FindX(img2, img)
fmt.Println(x, y)
}
IconKitchen
https://icon.kitchen/
App icon generator.
(the successor to the Android Asset Studio; source)
https://icon.kitchen/
App icon generator.
(the successor to the Android Asset Studio; source)