I finally present "ZeroShadow"
think of it like an automated debugger. you can watch functions execute, read memory or change how an app behaves on the fly without needing the source code.
it is a lightweight dynamic binary instrumentation engine for elf files. you use it to hook functions, trace execution paths and unpack malware without the massive overhead of heavy tools like frida.
https://github.com/PicasoTheDeal/ZeroShadow
think of it like an automated debugger. you can watch functions execute, read memory or change how an app behaves on the fly without needing the source code.
it is a lightweight dynamic binary instrumentation engine for elf files. you use it to hook functions, trace execution paths and unpack malware without the massive overhead of heavy tools like frida.
https://github.com/PicasoTheDeal/ZeroShadow
GitHub
GitHub - PicasoTheDeal/ZeroShadow: ELF binary tracing and instrumentation
ELF binary tracing and instrumentation. Contribute to PicasoTheDeal/ZeroShadow development by creating an account on GitHub.
๐ฅ5
Okay I am so locked in right now, so boom next proeject lol.
Talk about locking in for the wrong reason
So unlike last time i will start with blueprint but like digitally than my notebook. I will spoil it soon
๐ฅ2
You accept failure in the gym because you know it's optimal for growth. Then why fear it everywhere else?
KASCVE was one of my very many failed project i couldn't finished but in the way it taught me a lot stuff's.
I had and will have fail in the future, your life will have failure when trying to build your life, or a code or anything.You were never perfect and you never will, you were created to be imperfect. But you were created to build from that failure. It could be a code, no code was perfect from the first launch it had a lot of patches and fixes to reach were it is, so do you face the failure no matter what, it is the road to your success.
The more you try to avoid failure in your road of success, the longer it will take for you to reach your destiny.
@TetstackPM
KASCVE was one of my very many failed project i couldn't finished but in the way it taught me a lot stuff's.
I had and will have fail in the future, your life will have failure when trying to build your life, or a code or anything.You were never perfect and you never will, you were created to be imperfect. But you were created to build from that failure. It could be a code, no code was perfect from the first launch it had a lot of patches and fixes to reach were it is, so do you face the failure no matter what, it is the road to your success.
The more you try to avoid failure in your road of success, the longer it will take for you to reach your destiny.
@TetstackPM
๐ฃ ๐ฬถ๐ขฬถ๐ฑฬถ๐ฐฬถ๐ฑฬถ๐ฬถ๐ ฬถ๐จฬถ ๐ฃ
You accept failure in the gym because you know it's optimal for growth. Then why fear it everywhere else? KASCVE was one of my very many failed project i couldn't finished but in the way it taught me a lot stuff's. I had and will have fail in the futureโฆ
This media is not supported in your browser
VIEW IN TELEGRAM
I present
Well as of this days every major company is obsessed with
and mainly 99% of current tools only generate
Hackers(non script kiddies) are exploiting this blind spot. For example, recent 2026 attacks, like the
So I will build a lightweight, C++ CLI tool that doesn't care about source code. Instead, it runs the binary and traces it to generate a
dSBOMWell as of this days every major company is obsessed with
supply chain security and generating Software Bill of Materials (SBOMs) to comply with government regulations.and mainly 99% of current tools only generate
Static SBOMs. They scan source code, package.json, or go.mod files. But what is written on disk is not always what runs in memory.Hackers(non script kiddies) are exploiting this blind spot. For example, recent 2026 attacks, like the
MicrosoftSystem64 RAT, hide massive 81MB payloads inside single executables disguised as native, stripped ELF binaries. A static scanner looks at the binary, sees a standard Linux file, and passes it. It completely misses the malicious libraries loaded dynamically at runtime via dlopen() or hidden Node.js runtimes packed inside.So I will build a lightweight, C++ CLI tool that doesn't care about source code. Instead, it runs the binary and traces it to generate a
Runtime SBOM.sbom_gaiyo_en.pdf
284.6 KB
Okay according to this, handmade non AI pdfs that explains about SBOM to make the code and some tests. And the code is actually less than I expected.
tests
โโโ basic_link.c
โโโ dynamic_load.c
โโโ memory_injections.c
โโโ stress_syscall.cI ma start studying for matrik, tomorrow so won't be back until Thursday, with my laptop. Adios till then.
โก1๐ญ1๐1
Not gonna study today lol, maybe tomorrow I was on 4 am but now it's 7 so nahhh already ruined.
๐ญ3
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM