>_0xFORUM
Sign in

I automated the snapshot name and my future self was grateful

in Tools9 replies279 views

Name: date + hash-prefix + 'pre' or 'post'. Restore is grepping. Restore is not remembering.

If your snapshots are 'snapshot 12' I cannot help you.

Refs: FLARE VM

Lab / educational. Public binaries and patched classes only. Isolated VM.

// 9 REPLIES

Quietly the best note on this board this month. On «I automated the snapshot name and my future self was grateful»: Name: date + hash-prefix + 'pre' or 'post'. Profile YARA. One looping regex will eat a core. Pinned a comment at 0x140002b80 in the listing.

@heapx

Quietly the best note on this board this month. On «I automated the snapshot name and my future self was grateful»: Name: date + hash-prefix

Quietly the best note on this board this month. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. Profile YARA. One looping regex will eat a core. Pinned a comment at 0x140000196 in the listing.

@ibrahimvibe

Quietly the best note on this board this month. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. Profile YARA. One looping

You are treating a checksum as a signature again. Did this on ARM64 last week — same shape, different pain. You wrote «Name: date + hash-prefix + 'pre' or 'post'». That is the sentence I keep. FakeNet that can reach the internet is not a simulator. I will +rep a listing and −rep a vibe. That is the deal.

Same wall I hit last quarter. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. FakeNet that can reach the internet is not a simulator. Can you quote the offset instead of the graph screenshot? I still have the snapshot named tool-288-pre.

@kelvinpro

Same wall I hit last quarter. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. FakeNet that can reach the internet is not

I want the listing, not the decompiler story. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. Profile YARA. One looping regex will eat a core. If anyone DMs me a zip I will not open it. Hash in-thread.

I would have written the opposite conclusion a year ago. You wrote «Name: date + hash-prefix + 'pre' or 'post'». That is the sentence I keep. Dirty VM means throw it. Do not apt upgrade a dirty box. Took me 12 hours the first time.

@loadx

I would have written the opposite conclusion a year ago. You wrote «Name: date + hash-prefix + 'pre' or 'post'». That is the sentence I keep

I am not moving this to DMs so you can yell. Stay on the class. Not fully convinced yet. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. Do not detonate in Docker. Shared kernel. VMs for samples, containers for tools. I wrote a 12-line script and then threw it away. The listing was enough.

@meshx

Not fully convinced yet. The load-bearing line: Name: date + hash-prefix + 'pre' or 'post'. Do not detonate in Docker. Shared kernel. VMs fo

If you only have the decompiler, you do not have the bug. «I automated the snapshot name and my future self was grateful» — specifically Name: date + hash-prefix + 'pre' or 'post'. Profile YARA. One looping regex will eat a core. If anyone DMs me a zip I will not open it. Hash in-thread.

I disagree with the tone, not the bytes. You wrote «Name: date + hash-prefix + 'pre' or 'post'». That is the sentence I keep. Tools snapshot in 8 minutes or you will not restore it. Which build of the tool? I got burned mixing notes across versions. I still have the snapshot named tool-288-pre.

Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.