herrcore (@herrcore) header
herrcore (@herrcore) profile picture

UnpacMe | OALABS

Joined May 2009
Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)Photo by herrcore (@herrcore)
Join us on Friday October 30th for a halloween live stream at 1PM EST! We'll be reversing spooky scareware, come if you dare!
6
16
824
Discord is about to put your public messages on Google Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December. The feature is ON by default in most regions, but you can opt out: User Settings โ†’ Data & Privacy โ†’ turn off โ€œShow my message content from Discoverable channels on web pages.โ€ In the EU, UK, Canada, Brazil, Australia and South Korea, it will be OFF by default. Private servers, DMs and group DMs are not included. Usernames and avatars wonโ€™t appear alongside indexed messages.
925
12,965
2,386
71,480
9,949,641
herrcore retweeted
Unthemidator - a fully autonomous Themida / Code Virtualizer / Win License unpacker. Supports Themida/CV/WL v3.0 - v3.2.6.0 (latest), and CV v4.0. Unthemidator unpacks binaries, recovers imports, finds original entry point and unpacks compressed virtual machines too: github.com/x86rc/unthemidatoโ€ฆ
7
103
6
759
39,758
herrcore retweeted
Everyone who uses Screentime on Mac has been disappointed/knows it sucks. And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain. Install Screentime++: github.com/radkawar/screentiโ€ฆ
1
2
1
12
3,444
herrcore retweeted
With less than 1h left on the clock, #flareon13 finally in the bag! Taylor series were not on my bingo card ๐Ÿ˜… I can finally rest...
1
3
1
47
3,946
Well that's it for FLARE, here are the top human finishers. Appreciate everyone who participated in our little experiment, thanks! I think we will look back on this as a watershed moment for RE, impossible to ignore the future. The future is now ๐Ÿš€
5
2
66
6,624
New episode of Behind the Binary is live! ๐ŸŽ™๏ธJoined by @L0Psec to break down macOS security, ClickFix social engineering, InfoStealers (AMOS/MacSync), DPRK developer targeting, and the evolution of obfuscation. Plus, we talk about how AI is shifting reverse engineering and the inevitable future state... ๐ŸŽง podcasts.apple.com/us/podcasโ€ฆ
9
2
46
4,540
herrcore retweeted
My approach with Threat Hunting Labs has always been from the start to build it first, ship it, and make it better as we go along. Since launch, we've received a ton of useful feedback, and much of what you'll see in V2 came directly from those conversations. We've completely redesigned the platform and introduced some pretty substantial features, including Tailored Hunts, which can generate entire investigations with synthetic telemetry you can actually hunt through, technical tabletop exercises for teams, and much more... I wrote a blog post explaining what's changed and why. Thank you to everyone that's been supporting THL so far ๐Ÿ™ Really proud of the result, and there's plenty more to come! Blog post: threathuntinglabs.com/blog/iโ€ฆ
โœจ ๐—ง๐—ต๐—ฟ๐—ฒ๐—ฎ๐˜ ๐—›๐˜‚๐—ป๐˜๐—ถ๐—ป๐—ด ๐—Ÿ๐—ฎ๐—ฏ๐˜€ ๐—ฉ๐Ÿฎ ๐—ถ๐˜€ ๐—น๐—ถ๐˜ƒ๐—ฒ! ๐—ก๐—ฒ๐˜„: โœ… A redesigned UI/UX across the platform โœ… Tailored Hunts with synthetic telemetry in Elastic/Splunk, 10 validated investigation questions, and full reports. โœ… A query builder in Search Console โœ… Native Azure Logs portal access โœ… New improved Hunt Leads โœ… Team technical tabletops! Details in our blog post: threathuntinglabs.com/blog/iโ€ฆ
2
5
31
2,956
Ever wanted to just boot into an agent prompt ๐Ÿคฃ #UEFPi
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh. code available at github.com/H4vC/oh-my-uefPi
2
38
3,698
herrcore retweeted
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh. code available at github.com/H4vC/oh-my-uefPi
3
17
2
80
9,094
I went ahead and put up the Hall of Fame for this year, even though the contest just started. flare-on.com/hof.html #flareon13
9
18
106
6,530
Took around 1h to solve all of the challenges with this.... ๐Ÿคฏ
The official IDA MCP Server is here. It's free, open source, and works with any LLM. Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time. ๐šž๐šŸ๐šก ๐š’๐š๐šŠ-๐š‘๐šŒ๐š•๐š’ ๐š–๐šŒ๐š™ ๐š’๐š—๐šœ๐š๐šŠ๐š•๐š• hex-rays.com/blog/hex-rays-iโ€ฆ (copy-paste: uvx ida-hcli mcp install)
16
31
2
518
59,050
herrcore retweeted
#flareon13 the flag of the final challenge is available in a readme.txt file... @nickharbour
6
3
24
3,986
Fastest player solved it in 1 hour and 5 minutes and 43 seconds this year
Flare-on 13 starts in 1 day and you can already sign up for it: flare-on13.ctfd.io/. Apparently they forgot to add a link to it so finding the URL become the 0th challenge. Also I hope they get the time zone correct this time
7
7
5
94
27,513
TBH, Iโ€™m sceptical about โ€œhuman-onlyโ€ CTF boards when thereโ€™s no reliable way to verify how people solve the tasks. As long as we reward speed, thereโ€™s a strong incentive to use AI, and inevitably some will cheat. If we want to preserve the human challenge, we need to put more emphasis on learning, and less on who solved the fastest.
15
19
2
207
12,286
As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! ๐Ÿฅณ Details and links below โฌ‡๏ธ
10
73
1
377
20,544
herrcore retweeted
DO YOU LIKE COMPUTERS? DO YOU GET HIGH ON CLANK? JOIN US AT SL0P.FOO
3
12
49
4,058
#flareon13 registration is live at flare-on13.ctfd.io See you all tonight, its gonna be a weird one!
2
20
3
93
7,973