๐“†ฃ ๐”—ฬถ๐”ขฬถ๐”ฑฬถ๐”ฐฬถ๐”ฑฬถ๐”žฬถ๐” ฬถ๐”จฬถ ๐“†ฃ
107 subscribers
176 photos
2 videos
4 files
43 links
Download Telegram
Okay done, so another debug i was using hardcoding syscall number which is okay for x86-64, and i made t strictly bound, i will change it and add <sys/syscall.h> to include ARM and RISC-V. And a dead lock risk
I finally present "ZeroShadow"

think of it like an automated debugger. you can watch functions execute, read memory or change how an app behaves on the fly without needing the source code.

it is a lightweight dynamic binary instrumentation engine for elf files. you use it to hook functions, trace execution paths and unpack malware without the massive overhead of heavy tools like frida.

https://github.com/PicasoTheDeal/ZeroShadow
๐Ÿ”ฅ5
So unlike last time i will start with blueprint but like digitally than my notebook. I will spoil it soon
๐Ÿ”ฅ2
You accept failure in the gym because you know it's optimal for growth. Then why fear it everywhere else?

KASCVE was one of my very many failed project i couldn't finished but in the way it taught me a lot stuff's.

I had and will have fail in the future, your life will have failure when trying to build your life, or a code or anything.You were never perfect and you never will, you were created to be imperfect. But you were created to build from that failure. It could be a code, no code was perfect from the first launch it had a lot of patches and fixes to reach were it is, so do you face the failure no matter what, it is the road to your success.

The more you try to avoid failure in your road of success, the longer it will take for you to reach your destiny.

@TetstackPM
I present



dSBOM


Well as of this days every major company is obsessed with supply chain security and generating Software Bill of Materials (SBOMs) to comply with government regulations.

and mainly 99% of current tools only generate Static SBOMs. They scan source code, package.json, or go.mod files. But what is written on disk is not always what runs in memory.

Hackers(non script kiddies) are exploiting this blind spot. For example, recent 2026 attacks, like the MicrosoftSystem64 RAT, hide massive 81MB payloads inside single executables disguised as native, stripped ELF binaries. A static scanner looks at the binary, sees a standard Linux file, and passes it. It completely misses the malicious libraries loaded dynamically at runtime via dlopen() or hidden Node.js runtimes packed inside.

So I will build a lightweight, C++ CLI tool that doesn't care about source code. Instead, it runs the binary and traces it to generate a Runtime SBOM.
sbom_gaiyo_en.pdf
284.6 KB
Okay according to this, handmade non AI pdfs that explains about SBOM to make the code and some tests. And the code is actually less than I expected.

tests
โ”œโ”€โ”€ basic_link.c
โ”œโ”€โ”€ dynamic_load.c
โ”œโ”€โ”€ memory_injections.c
โ””โ”€โ”€ stress_syscall.c
I ma start studying for matrik, tomorrow so won't be back until Thursday, with my laptop. Adios till then.
โšก1๐Ÿ˜ญ1๐Ÿ‘€1
Not gonna study today lol, maybe tomorrow I was on 4 am but now it's 7 so nahhh already ruined.
๐Ÿ˜ญ3