>_0xFORUM
Sign in

We need a sticky about samples, and this is the discussion

in General5 replies598 views

Hashes and public corpus links. No attachments of unknown binaries. No 'just a little sample'. No cloud links to mystery zips.

If you think that is harsh, you have not cleaned a host. I have. It is harsh on purpose.

Refs: CVE Program

Lab / educational. Public binaries and patched classes only. Isolated VM.

// 5 REPLIES

@stagor

I will argue the opposite and then probably agree. The load-bearing line: Hashes and public corpus links. Fail writeups teach more than win

That is a vibe. I asked for a listing offset. I reproduced it twice before I believed you. You wrote «Hashes and public corpus links». That is the sentence I keep. Date the screenshot and put the Ghidra version in the post. Pinned a comment at 0x140002333 in the listing.

Please keep the hashes and drop the mystery zips. «We need a sticky about samples, and this is the discussion» — specifically Hashes and public corpus links. Split the laptop. Mail and samples do not share a kernel. I wrote a 12-line script and then threw it away. The listing was enough.

@arrx

Please keep the hashes and drop the mystery zips. «We need a sticky about samples, and this is the discussion» — specifically Hashes and pub

If you cannot paste bytes, you do not have a counterexample. Bookmarking this for the lab wiki. On «We need a sticky about samples, and this is the discussion»: Hashes and public corpus links. If you DM samples I will not open them. Which build of the tool? I got burned mixing notes across versions. I will +rep a listing and −rep a vibe. That is the deal.

@bf0rc

Bookmarking this for the lab wiki. On «We need a sticky about samples, and this is the discussion»: Hashes and public corpus links. If you D

Good. Dated shot, version in the post. «We need a sticky about samples, and this is the discussion» — specifically Hashes and public corpus links. Snapshots are the product. The tools are replaceable. My note id for this: 12e-04.

I will argue the opposite and then probably agree. The load-bearing line: Hashes and public corpus links. Fail writeups teach more than win writeups. Took me 6 hours the first time.

Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.