𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
@Tetstack
107 subscribers
176 photos
2 videos
4 files
43 links
My Archive? IDK

Owner: https://www.github.com/PicasoTheDeal

Portfolio:
https://isitreallyme.pages.dev

Blog:
https://engineering-logs.pages.dev/
Download Telegram
About
Blog
Apps
Platform
Join
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
107 subscribers
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Good night I ma go play some games
47 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I guess
48 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I messed up in the calculation, i forgot that when the c++ zeroshadow jumps in the way and because it uses ptrace it is going at approximately 10,000 ptrace steps per second. If according to the iteration i submitted which is 0x1FFFFFFFFF WHICH IS ABOUT 137 BILLION iteration, the assembly would have finished about maybe 30 sec, but because of that ptrace it would have took 60 days before it reaches the hijacker.
47 viewsedited  
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I hate coding on windows man
💯1
47 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Why is it crashing, I miss my pc
50 viewsedited  
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I miss linux
52 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I am even using a browser based vscode
51 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
This media is not supported in your browser
VIEW IN TELEGRAM
51 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Project needed to be hault dad came home and it's families movie time. I will continue tomorrow morning
49 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Damn 14 followers on github
60 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
This media is not supported in your browser
VIEW IN TELEGRAM
51 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Yeah follow me on github, please
51 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Damn 14 followers on github
Suspicious pattern tho, new followers have either forked the same repo or just have same bio.
👀1
59 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
Good Morning
47 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
This media is not supported in your browser
VIEW IN TELEGRAM
47 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
The debug is taking more time than the actual code architecture desing and writing.
555 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
picasothedealer_com@cloudshell:~/ZeroShadow$ ./runtime/shadow_stub & sleep 0.5 && sudo ./ZeroShadow $! ./runtime/shadow_stub
[6] 8635

[6]+ Stopped ./runtime/shadow_stub
[*] booting ZeroShadow supervisor...
[+] memory boundaries mapped.
[*] hooking PID: 8635...
[+] connected to prosses: 8635. monitoring loop active.
[*] dynamic ASLR base offset applied to all monitored regions.
[*] draining any leftover signals...
[DEBUG] drain signal: 19
[DEBUG] drain signal: 5
[DEBUG] drained, RIP: 0x5749d70b801f
[+] synchronised and drained. Starting main loop.
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8026 signal: 5
region:
49 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8029 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802c signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b802f signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b8031 signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b803b signal: 5
region: 0x95974652084224 - 0x95974652088320
[DEBUG] Check RIP: 0x5749d70b803b signal: b
region: 0x95974652084224 - 0x95974652088320
[!] CRITICAL: control flow hijack detected! RIP: 0x5749d70b803b signal: b
Error: supervisor loop drooped or connection lost.
[6]+ Killed ./runtime/shadow_stub
48 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
0x95974652084224 - 0x95974652088320 [DEBUG] Check RIP: 0x5749d70b8029 signal: 5 region: 0x95974652084224 - 0x95974652088320 [DEBUG] Check RIP: 0x5749d70b802c signal: 5 region: 0x95974652084224 - 0x95974652088320 [DEBUG] Check RIP: 0x5749d70b802f

aight okay, now it's detecting the jump. Just a slight problem the allowed map was corrupted and then the verify_instructur_pointer see's it doesn't make sense and the stop that happened at the end doesn't show what happened.
48 views
𓆣 đ”—Ì¶đ”ąÌ¶đ”±Ì¶đ”°Ì¶đ”±Ì¶đ”žÌ¶đ” Ì¶đ”šÌ¶ 𓆣
I don't want to write the offset boundary "by hand" so i will use ai, jk. I will read it from the

exact executable segment boundaries


directly from the process memory map.
46 viewsedited