Hiring is fine on the market as a service listing with a real name-shaped handle. Cold DM recruit + telegram is a ban.
This will be a sticky if people keep testing it.
Refs: ATT&CK
Lab / educational. Public binaries and patched classes only. Isolated VM.
Not fully convinced yet. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I wrote a 12-line script and then threw it away. The listing was enough.
@modelz
Not fully convinced yet. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not rec
You keep moving the goalposts. First it was the decoder, now it is the dump. Not fully convinced yet. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. Pinned a comment at 0x14000401a in the listing.
Did this on ARM64 last week — same shape, different pain. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Took me 7 hours the first time.
@omegax
Did this on ARM64 last week — same shape, different pain. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine o
Decompiler output is a hypothesis. Treat it like one. I disagree with the tone, not the bytes. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. Is the hang the incomplete patch, or a second bug? If anyone DMs me a zip I will not open it. Hash in-thread.
@pivotr
I disagree with the tone, not the bytes. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped ha
This belongs in the first-hour ritual. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@realchris
This belongs in the first-hour ritual. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a s
This is getting personal and it does not need to. This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. If you DM samples I will not open them. Took me 7 hours the first time.
@stagor
I want the listing, not the decompiler story. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle».
Stop flexing an IDA license. The question was the unwind info. I reproduced it twice before I believed you. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. What did you key the join on — PID or process GUID? I reproduced it on lab build 1262.
This is the writeup I wanted when I was stuck. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I wrote a 12-line script and then threw it away. The listing was enough.
@arrx
This is the writeup I wanted when I was stuck. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the marke
Calling the sticky 'priest talk' is how you earn a ban note. This is the writeup I wanted when I was stuck. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. I will +rep a listing and −rep a vibe. That is the deal.
@bf0rc
This is the writeup I wanted when I was stuck. The load-bearing line: Hiring is fine on the market as a service listing with a real name-sha
Please keep the hashes and drop the mystery zips. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@brandonhub
Please keep the hashes and drop the mystery zips. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a s
That is a vibe. I asked for a listing offset. I want the listing, not the decompiler story. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. If you DM samples I will not open them. Took me 7 hours the first time.
I will argue the opposite and then probably agree. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. Did page heap see it, or only the sanitizer? My note id for this: 13e-18.
@chukwuebuka
I will argue the opposite and then probably agree. The load-bearing line: Hiring is fine on the market as a service listing with a real name
If you cannot paste bytes, you do not have a counterexample. Bookmarking this for the lab wiki. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. My note id for this: 13e-19.
I reproduced it twice before I believed you. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Bonded is a bond, not a halo. Use escrow. I still have the snapshot named gene-318-pre.
Also: Split the laptop. Mail and samples do not share a kernel.
@cybx
I reproduced it twice before I believed you. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». T
You keep moving the goalposts. First it was the decoder, now it is the dump. This matches a public n-day class from last patch Tuesday. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. If you DM samples I will not open them. Version in my shot: current lab snapshot, not last year's blog.
@davidxo
This matches a public n-day class from last patch Tuesday. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine
Quietly the best note on this board this month. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Date the screenshot and put the Ghidra version in the post. Pinned a comment at 0x140000d55 in the listing.
@echo
Quietly the best note on this board this month. The load-bearing line: Hiring is fine on the market as a service listing with a real name-sh
Decompiler output is a hypothesis. Treat it like one. If you only have the decompiler, you do not have the bug. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. If you DM samples I will not open them. Did page heap see it, or only the sanitizer? I still have the snapshot named gene-318-pre.
I would have written the opposite conclusion a year ago. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@foren
I would have written the opposite conclusion a year ago. The load-bearing line: Hiring is fine on the market as a service listing with a rea
This is getting personal and it does not need to. This is the kind of thread that should be a sticky and is not. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Snapshots are the product. The tools are replaceable. Took me 10 hours the first time.
Came back to this after a coffee. Still hold. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Public binary means licensed, owned, or your own crackme. Not 'I found it'. Same class as the March thread, different binary.
@h4sh
Came back to this after a coffee. Still hold. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market
That insult was not a technical point. I am reporting it. This is the writeup I wanted when I was stuck. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Date the screenshot and put the Ghidra version in the post. Pinned a comment at 0x140004d1c in the listing.
@hexor
This is the writeup I wanted when I was stuck. The load-bearing line: Hiring is fine on the market as a service listing with a real name-sha
Quietly the best note on this board this month. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Bonded is a bond, not a halo. Use escrow. After you did that, did the decompiler pick it up or did you dump? If anyone DMs me a zip I will not open it. Hash in-thread.
@index
Quietly the best note on this board this month. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a ser
I am reporting the sample-drop hint. Hash and corpus tag only. Same wall I hit last quarter. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Public binary means licensed, owned, or your own crackme. Not 'I found it'. I reproduced it on lab build 1378.
Quietly the best note on this board this month. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Same class as the June thread, different binary.
@kernx
Quietly the best note on this board this month. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the mark
The graph hid it. The listing did not. Trust the listing. I tried the naive path first and wasted a morning. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. Version in my shot: current lab snapshot, not last year's blog.
Bookmarking this for the lab wiki. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Bonded is a bond, not a halo. Use escrow. I wrote a 12-line script and then threw it away. The listing was enough.
@logx
Bookmarking this for the lab wiki. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle.
Stop flexing an IDA license. The question was the unwind info. Bookmarking this for the lab wiki. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. Can you quote the offset instead of the graph screenshot? My note id for this: 13e-33.
@modx
Bookmarking this for the lab wiki. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle.
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Date the screenshot and put the Ghidra version in the post. Same class as the March thread, different binary.
@nodes
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped hand
Calling the sticky 'priest talk' is how you earn a ban note. Came back to this after a coffee. Still hold. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I wrote a 12-line script and then threw it away. The listing was enough.
Bookmarking this for the lab wiki. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Split the laptop. Mail and samples do not share a kernel. I will +rep a listing and −rep a vibe. That is the deal.
Also: Quote the bytes or it is a vibe.
@pktsec
Bookmarking this for the lab wiki. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing
That is a vibe. I asked for a listing offset. This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. If you DM samples I will not open them. Version in my shot: current lab snapshot, not last year's blog.
The screenshot is the useful part of the post. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Fail writeups teach more than win writeups. Did page heap see it, or only the sanitizer? Took me 10 hours the first time.
@voltx
This is the kind of thread that should be a sticky and is not. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is f
I still keep a paper notebook for this kind of note. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I will +rep a listing and −rep a vibe. That is the deal.
@alert
I still keep a paper notebook for this kind of note. The load-bearing line: Hiring is fine on the market as a service listing with a real na
That insult was not a technical point. I am reporting it. Good. Dated shot, version in the post. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Fail writeups teach more than win writeups. Same class as the October thread, different binary.
Same wall I hit last quarter. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Bonded is a bond, not a halo. Use escrow. Did you force-create the function or did auto-analysis luck into it? I will +rep a listing and −rep a vibe. That is the deal.
@binsec
Same wall I hit last quarter. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Bonde
I am reporting the sample-drop hint. Hash and corpus tag only. I ran this on a licensed corpus binary. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Date the screenshot and put the Ghidra version in the post. Took me 10 hours the first time.
I ran this on a licensed corpus binary. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Snapshots are the product. The tools are replaceable. I wrote a 12-line script and then threw it away. The listing was enough.
@c2node
I ran this on a licensed corpus binary. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a
The graph hid it. The listing did not. Trust the listing. This matches a public n-day class from last patch Tuesday. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I will +rep a listing and −rep a vibe. That is the deal.
@ciph3r
This matches a public n-day class from last patch Tuesday. The load-bearing line: Hiring is fine on the market as a service listing with a r
I tried the naive path first and wasted a morning. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. My note id for this: 13e-52.
@control
I tried the naive path first and wasted a morning. The load-bearing line: Hiring is fine on the market as a service listing with a real name
Stop flexing an IDA license. The question was the unwind info. Did this on ARM64 last week — same shape, different pain. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. Which build of the tool? I got burned mixing notes across versions. Took me 10 hours the first time.
Came back to this after a coffee. Still hold. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Fail writeups teach more than win writeups. If anyone DMs me a zip I will not open it. Hash in-thread.
@dec0de
Came back to this after a coffee. Still hold. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle».
Calling the sticky 'priest talk' is how you earn a ban note. Agreed on the class, not on the tool. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Date the screenshot and put the Ghidra version in the post. I wrote a 12-line script and then threw it away. The listing was enough.
I failed this exact class in January. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. I reproduced it on lab build 1186.
Serious people DM me, I have a telegram for private work. Forum escrow is for kids. @ me.
@exec
telegram for private work
Cold telegram recruit is a ban. Market listing with a bond, or do not.
Bond is a joke. Real operators do not dox themselves on a market. You mods eat vendor fees.
banned baikal — off-site recruiting, telegram, insulting staff. Permanent. Locked.
I ran this on a licensed corpus binary. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Fail writeups teach more than win writeups. If anyone DMs me a zip I will not open it. Hash in-thread.
@safex
The screenshot is the useful part of the post. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a serv
If you cannot paste bytes, you do not have a counterexample. Agreed on the class, not on the tool. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. I still have the snapshot named gene-318-pre.
@shield
Agreed on the class, not on the tool. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listi
If you only have the decompiler, you do not have the bug. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Fail writeups teach more than win writeups. I reproduced it on lab build 1369.
@shadow
I ran this on a licensed corpus binary. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a
That insult was not a technical point. I am reporting it. This is the kind of thread that should be a sticky and is not. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Public binary means licensed, owned, or your own crackme. Not 'I found it'. I reproduced it on lab build 1021.
I want the listing, not the decompiler story. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Snapshots are the product. The tools are replaceable. I still have the snapshot named gene-318-pre.
Also: Snapshots are the product. The tools are replaceable.
Came back to this after a coffee. Still hold. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. Is the hang the incomplete patch, or a second bug? Version in my shot: current lab snapshot, not last year's blog.
@softspoken
If you only have the decompiler, you do not have the bug. The load-bearing line: Hiring is fine on the market as a service listing with a re
You keep moving the goalposts. First it was the decoder, now it is the dump. If you only have the decompiler, you do not have the bug. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Do not recruit in DMs. Market listing or nothing. I will +rep a listing and −rep a vibe. That is the deal.
@sudo
Came back to this after a coffee. Still hold. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a servi
I am reporting the sample-drop hint. Hash and corpus tag only. I will argue the opposite and then probably agree. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a service listing with a real name-shaped handle. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 13e-09.
Good. Dated shot, version in the post. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@youngdave
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped hand
This is getting personal and it does not need to. This is the kind of thread that should be a sticky and is not. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a service listing with a real name-shaped handle. Quote the bytes or it is a vibe. Pinned a comment at 0x140004aa8 in the listing.
@trevorhub
I will argue the opposite and then probably agree. On «Do not recruit in DMs. Use the market or do not.»: Hiring is fine on the market as a
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Date the screenshot and put the Ghidra version in the post. I wrote a 12-line script and then threw it away. The listing was enough.
@ttyx
Good. Dated shot, version in the post. «Do not recruit in DMs. Use the market or do not.» — specifically Hiring is fine on the market as a s
Decompiler output is a hypothesis. Treat it like one. This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Defenders belong here. Detections are first-class. Did you force-create the function or did auto-analysis luck into it? My note id for this: 13e-43.
@volt
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped hand
The graph hid it. The listing did not. Trust the listing. This belongs in the first-hour ritual. You wrote «Hiring is fine on the market as a service listing with a real name-shaped handle». That is the sentence I keep. Split the laptop. Mail and samples do not share a kernel. My note id for this: 13e-11.
This belongs in the first-hour ritual. The load-bearing line: Hiring is fine on the market as a service listing with a real name-shaped handle. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 13e-44.
Also: If you DM samples I will not open them.