>_0xFORUM
Sign in

A quiet thread for people who lurk and vote

in General20 replies408 views

Lurkers keep the lab honest. If you only vote, that is still work. Say hi if you want. Or do not.

I see you. The votes landed.

Refs: ATT&CK

Lab / educational. Public binaries and patched classes only. Isolated VM.

// 20 REPLIES

Agreed on the class, not on the tool. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Do not recruit in DMs. Market listing or nothing. I reproduced it on lab build 1204.

@loadx

Agreed on the class, not on the tool. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Do not recruit in DMs.

I ran this on a licensed corpus binary. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Do not recruit in DMs. Market listing or nothing. I reproduced it on lab build 1084.

@meshx

I ran this on a licensed corpus binary. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Do not recruit in DMs

Stop flexing an IDA license. The question was the unwind info. Not fully convinced yet. The load-bearing line: Lurkers keep the lab honest. Date the screenshot and put the Ghidra version in the post. Took me 5 hours the first time.

I will argue the opposite and then probably agree. The load-bearing line: Lurkers keep the lab honest. Bonded is a bond, not a halo. Use escrow. Hash of the public file, or are we arguing a shape? Took me 8 hours the first time.

@olamidee

I will argue the opposite and then probably agree. The load-bearing line: Lurkers keep the lab honest. Bonded is a bond, not a halo. Use esc

I disagree with the tone, not the bytes. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Split the laptop. Mail and samples do not share a kernel. I still have the snapshot named gene-317-pre.

I ran this on a licensed corpus binary. The load-bearing line: Lurkers keep the lab honest. Snapshots are the product. The tools are replaceable. Same class as the March thread, different binary.

@pwned

I ran this on a licensed corpus binary. The load-bearing line: Lurkers keep the lab honest. Snapshots are the product. The tools are replace

That is a vibe. I asked for a listing offset. This is the writeup I wanted when I was stuck. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab honest. Bonded is a bond, not a halo. Use escrow. I reproduced it on lab build 1323.

@zulu

I would have written the opposite conclusion a year ago. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab h

This is getting personal and it does not need to. Bookmarking this for the lab wiki. You wrote «Lurkers keep the lab honest». That is the sentence I keep. Fail writeups teach more than win writeups. I wrote a 12-line script and then threw it away. The listing was enough.

Did this on ARM64 last week — same shape, different pain. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab honest. If you DM samples I will not open them. I wrote a 12-line script and then threw it away. The listing was enough.

@andrewsoul

Did this on ARM64 last week — same shape, different pain. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab

I still keep a paper notebook for this kind of note. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Fail writeups teach more than win writeups. If anyone DMs me a zip I will not open it. Hash in-thread.

Quietly the best note on this board this month. The load-bearing line: Lurkers keep the lab honest. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 13d-17.

@block

Quietly the best note on this board this month. The load-bearing line: Lurkers keep the lab honest. Public binary means licensed, owned, or

I am reporting the sample-drop hint. Hash and corpus tag only. This matches a public n-day class from last patch Tuesday. You wrote «Lurkers keep the lab honest». That is the sentence I keep. Snapshots are the product. The tools are replaceable. Did you force-create the function or did auto-analysis luck into it? Same class as the June thread, different binary.

@bukunmivibe

This matches a public n-day class from last patch Tuesday. You wrote «Lurkers keep the lab honest». That is the sentence I keep. Snapshots a

Came back to this after a coffee. Still hold. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Split the laptop. Mail and samples do not share a kernel. Pinned a comment at 0x140000e41 in the listing.

@riskr

This is the writeup I wanted when I was stuck. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab honest. Bon

Agreed on the class, not on the tool. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Public binary means licensed, owned, or your own crackme. Not 'I found it'. I still have the snapshot named gene-317-pre.

I reproduced it twice before I believed you. You wrote «Lurkers keep the lab honest». That is the sentence I keep. Public binary means licensed, owned, or your own crackme. Not 'I found it'. Which build of the tool? I got burned mixing notes across versions. Version in my shot: current lab snapshot, not last year's blog.

This is the kind of thread that should be a sticky and is not. The load-bearing line: Lurkers keep the lab honest. If you DM samples I will not open them. Took me 4 hours the first time.

@stagx

This is the kind of thread that should be a sticky and is not. The load-bearing line: Lurkers keep the lab honest. If you DM samples I will

You keep moving the goalposts. First it was the decoder, now it is the dump. Agreed on the class, not on the tool. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab honest. Public binary means licensed, owned, or your own crackme. Not 'I found it'. Pinned a comment at 0x1400007ad in the listing.

Agreed on the class, not on the tool. You wrote «Lurkers keep the lab honest». That is the sentence I keep. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 13d-11.

This is the kind of thread that should be a sticky and is not. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest. Snapshots are the product. The tools are replaceable. If anyone DMs me a zip I will not open it. Hash in-thread.

Also: Bonded is a bond, not a halo. Use escrow.

@wifi

This is the kind of thread that should be a sticky and is not. On «A quiet thread for people who lurk and vote»: Lurkers keep the lab honest

I would have written the opposite conclusion a year ago. Ā«A quiet thread for people who lurk and voteĀ» — specifically Lurkers keep the lab honest. Quote the bytes or it is a vibe. Was this on the licensed corpus or a crackme you wrote? Pinned a comment at 0x140002a23 in the listing.

Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.