herrcore retweeted
Join us on Friday October 30th for a halloween live stream at 1PM EST! We'll be reversing spooky scareware, come if you dare!
herrcore retweeted
Discord is about to put your public messages on Google
Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December.
The feature is ON by default in most regions, but you can opt out:
User Settings โ Data & Privacy โ turn off โShow my message content from Discoverable channels on web pages.โ
In the EU, UK, Canada, Brazil, Australia and South Korea, it will be OFF by default.
Private servers, DMs and group DMs are not included. Usernames and avatars wonโt appear alongside indexed messages.
Unthemidator - a fully autonomous Themida / Code Virtualizer / Win License unpacker. Supports Themida/CV/WL v3.0 - v3.2.6.0 (latest), and CV v4.0. Unthemidator unpacks binaries, recovers imports, finds original entry point and unpacks compressed virtual machines too:
github.com/x86rc/unthemidatoโฆ
Everyone who uses Screentime on Mac has been disappointed/knows it sucks.
And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain.
Install Screentime++: github.com/radkawar/screentiโฆ
herrcore retweeted
With less than 1h left on the clock, #flareon13 finally in the bag!
Taylor series were not on my bingo card ๐
I can finally rest...
herrcore retweeted
New episode of Behind the Binary is live!
๐๏ธJoined by @L0Psec to break down macOS security, ClickFix social engineering, InfoStealers (AMOS/MacSync), DPRK developer targeting, and the evolution of obfuscation.
Plus, we talk about how AI is shifting reverse engineering and the inevitable future state...
๐ง podcasts.apple.com/us/podcasโฆ
herrcore retweeted
My approach with Threat Hunting Labs has always been from the start to build it first, ship it, and make it better as we go along.
Since launch, we've received a ton of useful feedback, and much of what you'll see in V2 came directly from those conversations.
We've completely redesigned the platform and introduced some pretty substantial features, including Tailored Hunts, which can generate entire investigations with synthetic telemetry you can actually hunt through, technical tabletop exercises for teams, and much more...
I wrote a blog post explaining what's changed and why. Thank you to everyone that's been supporting THL so far ๐ Really proud of the result, and there's plenty more to come!
Blog post: threathuntinglabs.com/blog/iโฆ
โจ ๐ง๐ต๐ฟ๐ฒ๐ฎ๐ ๐๐๐ป๐๐ถ๐ป๐ด ๐๐ฎ๐ฏ๐ ๐ฉ๐ฎ ๐ถ๐ ๐น๐ถ๐๐ฒ!
๐ก๐ฒ๐:
โ
A redesigned UI/UX across the platform
โ
Tailored Hunts with synthetic telemetry in Elastic/Splunk, 10 validated investigation questions, and full reports.
โ
A query builder in Search Console
โ
Native Azure Logs portal access
โ
New improved Hunt Leads
โ
Team technical tabletops!
Details in our blog post:
threathuntinglabs.com/blog/iโฆ
Emulation-based unpacker and import resolver for Windows x64 VMProtect 3.x binaries: github.com/x86rc/vmp-lazy-unโฆ
Ever wanted to just boot into an agent prompt ๐คฃ #UEFPi
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh.
code available at github.com/H4vC/oh-my-uefPi
herrcore retweeted
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh.
code available at github.com/H4vC/oh-my-uefPi
herrcore retweeted
I went ahead and put up the Hall of Fame for this year, even though the contest just started. flare-on.com/hof.html #flareon13
herrcore retweeted
Took around 1h to solve all of the challenges with this.... ๐คฏ
The official IDA MCP Server is here. It's free, open source, and works with any LLM.
Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time.
๐๐๐ก ๐๐๐-๐๐๐๐ ๐๐๐ ๐๐๐๐๐๐๐
hex-rays.com/blog/hex-rays-iโฆ
(copy-paste: uvx ida-hcli mcp install)
#flareon13 the flag of the final challenge is available in a readme.txt file... @nickharbour
herrcore retweeted
Fastest player solved it in 1 hour and 5 minutes and 43 seconds this year
Flare-on 13 starts in 1 day and you can already sign up for it: flare-on13.ctfd.io/. Apparently they forgot to add a link to it so finding the URL become the 0th challenge. Also I hope they get the time zone correct this time
herrcore retweeted
TBH, Iโm sceptical about โhuman-onlyโ CTF boards when thereโs no reliable way to verify how people solve the tasks. As long as we reward speed, thereโs a strong incentive to use AI, and inevitably some will cheat. If we want to preserve the human challenge, we need to put more emphasis on learning, and less on who solved the fastest.
herrcore retweeted
As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! ๐ฅณ
Details and links below โฌ๏ธ

ALT We are happy to introduce the official IDA MCP server! This free and open source software connects your IDA installation with AI agents, enabling them to disassemble, decompile, and support reverse engineering tasks. It works great with models like Gemini, Qwen, or Opus using familiar harnesses like Claude Code, Codex, or Pi. Across our internal malware analysis-focused benchmark, IDA MCPโs โcode modeโ architecture reduced token consumption by approximately 20% compared to popular alternatives.
herrcore retweeted
#flareon13 registration is live at flare-on13.ctfd.io
See you all tonight, its gonna be a weird one!































