Socel: Social for the Animation Arts

0 posts0 participants0 posts today

Jack C.Another detour on the Time Machine <a href="https://indieweb.social/tags/Pinball" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pinball</a> <a href="https://indieweb.social/tags/disassembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disassembly</a> project, I think the processor specification I've been using is incomplete. There are a lot of instances of indexed addressing being interpreted as an offset from the current address. This is making it hard to figure out where in RAM different pieces of data live without manually calculating the address.Time to learn <a href="https://indieweb.social/tags/Sleigh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sleigh</a> and patch the processor definition. Maybe the extension author will even accept a pull request.<a href="https://indieweb.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> <a href="https://indieweb.social/tags/MC6800" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MC6800</a>

Jack C.Cool. After my productivity speedbump of last night, my Time Machine <a href="https://indieweb.social/tags/pinball" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pinball</a> <a href="https://indieweb.social/tags/disassembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disassembly</a> project has moved forward. I now have a python script which exports the <a href="https://indieweb.social/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a> program into an info file which a real 6800 disassembler reads to produce assembly which should actually be able to be reassembled into a final binary.I'll use ghidra to continue analyzing the code, and when I'm ready to actually start writing my own patches, I'll do that outside of ghidra as though it were a source file.

Jack C.Perusing the <a href="https://indieweb.social/tags/documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#documentation</a> for JPype as it's the translation layer letting me write my <a href="https://indieweb.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> script in <a href="https://indieweb.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>, and I'm enjoying the conversational style of the introduction in the user guide <a href="https://jpype.readthedocs.io/en/latest/userguide.html#case-1-access-to-a-java-library" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://jpype.readthedocs.io/en/latest/userguide.html#case-1-access-to-a-java-library</a><a href="https://indieweb.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a> <a href="https://indieweb.social/tags/Disassembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Disassembly</a> <a href="https://indieweb.social/tags/Motorola68xx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Motorola68xx</a>

WashiAfter <a href="https://infosec.exchange/tags/flareon11" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#flareon11</a> challenge 7, I got inspired to build tooling for <a href="https://infosec.exchange/tags/dotnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dotnet</a> Native AOT reverse engineering.As such, I built a <a href="https://infosec.exchange/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> Analyzer that can automatically recover most .NET types, methods and frozen objects (e.g., strings).👉<a href="https://blog.washi.dev/posts/recovering-nativeaot-metadata/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.washi.dev/posts/recovering-nativeaot-metadata/</a>

Jack C.Working on getting my toolchain put together of <a href="https://indieweb.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> -> f9dasm disassembler -> AS macro assembler -> EPROM programmer software (??) is taking a lot of work on the frontend. The goal is to keep working on exploring the code with Ghidra, then re-disassembling with the labels and comments with a dedicated 6800 disassembler, editing the assembly source and reassembling. I'll also have to write a little code to generate values to adjust the ROM checksum. Just a lot of work 😝

Jack C.Haven't worked on my <a href="https://indieweb.social/tags/Pinball" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pinball</a> code <a href="https://indieweb.social/tags/disassembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disassembly</a> much directly, but I have been working to get all the tools I need collected. It seems like once I've used <a href="https://indieweb.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> to annotate and explore the code I'll want to bring the disassembled "source" into a real editor to actually make my changes. To ensure the actual disassembly is compatible with assembling back to EPROM images, I plan to write a script to convert ghidra's code representation into a file that will drive a dedicated 68xx disassembler

Damien CauquilHey fedi, if someone knows how to correctly define parallelized instructions in Ghidra's SLEIGH, well, I'm more than interested !Or if you are aware of any decent documentation on how to define parallelized instructions in SLEIGH and want to share some pointers, that would be awesome too 😊 <a href="https://mamot.fr/tags/reverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reverse</a> <a href="https://mamot.fr/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a>

Jack C.Well, since I was last working on my Time Machine <a href="https://indieweb.social/tags/Pinball" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pinball</a> reverse engineering project, <a href="https://indieweb.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> updates have blown away whatever I did to install mc6800 processor support, and of course I didn't document what I did. Time to pick up the pieces so I can actually get into the meat of the project.Ideally this time I'll set it up so it isn't overridden when the <a href="https://indieweb.social/tags/flatpak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#flatpak</a> is updated.<a href="https://indieweb.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a> <a href="https://indieweb.social/tags/Motorola68xx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Motorola68xx</a> <a href="https://indieweb.social/tags/Assembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Assembly</a> <a href="https://indieweb.social/tags/Documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Documentation</a>

buheratorAs you probably know loadlibrary by <a class="u-url mention" href="https://social.sdf.org/@taviso" rel="nofollow noopener noreferrer" target="_blank">@taviso</a> can load Windows DLL's - including Windows Defenders mpengine.dll - on Linux. Since the loader needed some debugging I ended up figuring out how to load the Linux-native mpclient into <a class="hashtag" href="https://infosec.place/tag/ghidra" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a>'s debugger and use it to debug the PE module too: <a href="https://github.com/v-p-b/loadlibrary/blob/x64_waffle/GHIDRA.md" rel="nofollow noopener noreferrer" target="_blank">https://github.com/v-p-b/loadlibrary/blob/x64_waffle/GHIDRA.md</a> This can spare an IDA license and performing dark arts with awk and gas...which is actually pretty badass, so if you want to keep doing that without IDA here's a Ghidra script too: <a href="https://gist.github.com/v-p-b/c7d934234297158047b678f655c7d99f" rel="nofollow noopener noreferrer" target="_blank">https://gist.github.com/v-p-b/c7d934234297158047b678f655c7d99f</a>

Kevin Karhan :verified:<a href="https://toot.io/@hisold" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@hisold</a> OFC <a href="https://infosec.space/tags/Cheats" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cheats</a> are a way to learn how to "<a href="https://infosec.space/tags/hack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hack</a>" as in "What if I change the value at this address?"<ul><li><a href="https://infosec.space/tags/CheatEngine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CheatEngine</a> is like the old tool everyone who didn't have a cracked <a href="https://infosec.space/tags/IDE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IDE</a> / <a href="https://infosec.space/tags/debugger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#debugger</a> at hand in the days before <a href="https://infosec.space/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a>.</li></ul>And I still do recommend anyone interested in <a href="https://infosec.space/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a> and espechally <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a> to build themselves their own <a href="https://infosec.space/tags/airgapped" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#airgapped</a> <a href="https://infosec.space/tags/HomeLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HomeLab</a> to "<a href="https://infosec.space/tags/FuckAroundAndFindOut" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FuckAroundAndFindOut</a>!" safely within.<ul><li>Kinda like a "Dojo" (something that costs $$ per hour in terms of a "remote lab" to even be given access in)...</li></ul>And with <a href="https://infosec.space/tags/AntiP2W" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AntiP2W</a> becoming mainstream as well as Players despising <a href="https://infosec.space/tags/P2W" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#P2W</a> / <a href="https://infosec.space/tags/PayToWin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PayToWin</a> / <a href="https://infosec.space/tags/Pay2Win" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pay2Win</a> (aka. <a href="https://infosec.space/tags/P2L" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#P2L</a> / <a href="https://infosec.space/tags/PayToLoose" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PayToLoose</a> / <a href="https://infosec.space/tags/Pay2Loose" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pay2Loose</a>) as well as literal <a href="https://infosec.space/tags/gambling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gambling</a> on some <a href="https://infosec.space/tags/Minecraft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Minecraft</a> servers, I don't blame Kids that feel shafted (harder than <a href="https://infosec.space/tags/Millenials" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Millenials</a> like myself <a href="https://www.youtube.com/watch?v=hE6jxjKPNZQ" rel="nofollow noopener noreferrer" target="_blank">back</a> in <a href="https://www.youtube.com/watch?v=HiDPTiFHfcs" rel="nofollow noopener noreferrer" target="_blank">the days</a> of <a href="https://infosec.space/tags/HabboHotel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HabboHotel</a>) if they decide to fuck with servers <a href="https://www.youtube.com/watch?v=3ARx93JDEaw" rel="nofollow noopener noreferrer" target="_blank">rather than scamming other players</a>…

cryptaxThat guy hacked his air purifier, reversed part of the Android app, then the PCB, downloaded the firmware and reversed everything .. to integrate it to HomeAssistant! :oDidn't know about MessagePack nor esp32knife.<a href="https://jmswrnr.com/blog/hacking-a-smart-home-device" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://jmswrnr.com/blog/hacking-a-smart-home-device</a><a href="https://mastodon.social/tags/IoT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IoT</a> <a href="https://mastodon.social/tags/homeassistant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homeassistant</a> <a href="https://mastodon.social/tags/reverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reverse</a> <a href="https://mastodon.social/tags/esp32" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#esp32</a> <a href="https://mastodon.social/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a>

Kevin Thomas ✅🚀 Ghidra 11.3 is here! 🚀For those of us in reverse engineering, vulnerability research, and malware analysis, this latest release from the NSA brings some important updates:🔹 Backward Compatibility – Existing projects from previous versions will work, but programs and data type archives created in 11.3 won’t be usable in older Ghidra versions. 🔹 Java 21 Required – If you’re upgrading, make sure your system is running at least JDK 21. 🔹 Python 3.9–3.13 Support – Debugging and full-source builds require Python 3 on your system. 🔹 Fix for XWindows Server Crashes – If you’ve experienced full logouts or instability, it’s likely due to CVE-2024-31083. The issue is patched in xwayland 23.2.6 and xorg-server 21.1.13—make sure your system is updated! 🔹 Ghidra Server Compatibility – Ghidra 11.x clients remain compatible with Ghidra 9.2+ servers, but for best results, servers older than 10.2 should be upgraded. 🔹 Native Component Support – Each build includes native decompiler components, but if you’re running on older shared libraries (e.g., CentOS 7.x), you might need to rebuild certain native components like the GNU Demangler.If you’re using Ghidra for binary analysis, firmware reversing, or vulnerability research, this update brings stability improvements and potentially better import/analysis results compared to previous versions.🔍 Pro tip: If you’ve analyzed binaries in a beta or self-built Ghidra version, re-import and reanalyze them with 11.3 to ensure accuracy.🔥 Excited to test out the latest features! Who else is upgrading? What’s your go-to reverse engineering setup?<a href="https://defcon.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> <a href="https://defcon.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a> <a href="https://defcon.social/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VulnerabilityResearch</a> <a href="https://defcon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://defcon.social/tags/MalwareAnalysis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MalwareAnalysis</a><a href="https://github.com/NationalSecurityAgency/ghidra/releases" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/NationalSecurityAgency/ghidra/releases</a>

Kevin Thomas ✅<a href="https://defcon.social/tags/GhidraBytes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GhidraBytes</a> 0x03 - ATmega328P Blink Driver: We continue our journey with <a href="https://defcon.social/tags/AVR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AVR</a> <a href="https://defcon.social/tags/Assembler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Assembler</a> with <a href="https://defcon.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> by finding the main function, DAT_mem_0025 is a mem mapped IO reg sets the PB5 for the LED and we can see it in the Assembler and Decomple views. <a href="https://defcon.social/tags/Embedded" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Embedded</a> <a href="https://defcon.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a>

Luke T. ShumakerUgg, ret-sync is useless here. It relies on gdb `info proc mappings`, which doesn't work on remote targets. But I have already put the mappings in <a href="https://fosstodon.org/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a>!

postmodernNeat, someone used JRuby to add Ruby scripting support to Ghidra. <a href="https://github.com/goatshriek/ruby-dragon#readme" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/goatshriek/ruby-dragon#readme</a><a href="https://infosec.exchange/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a> <a href="https://infosec.exchange/tags/jruby" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jruby</a> <a href="https://infosec.exchange/tags/ruby" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ruby</a>

Kevin Thomas ✅Really excited about teaching my, "Hacking Bits", course to the 91st Cyber Brigade w/ the Virginia National Guard! It will be jam-packed with <a href="https://defcon.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a> with <a href="https://defcon.social/tags/Ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a>, in addition to learning Embedded C++ using an ATmega128p with AVR Assembler! See you all in April!

cryptaxI've been running decai with Claude AI on a malware named Goldoon.Ghidra is usually quite good to decompile, but just compare the decompiled output with r2 (<a href="https://infosec.exchange/@radareorg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@radareorg</a>) decai/Claude and ghidra! This is marvelous. So much clear and concise + Claude immediately thought this was malicious (I didn't hint anything).NB. I will talk about this at <a href="https://infosec.exchange/@1ns0mn1h4ck" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@1ns0mn1h4ck</a> <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://mastodon.social/tags/radare2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#radare2</a> <a href="https://mastodon.social/tags/decai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#decai</a> <a href="https://mastodon.social/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a>

buheratorIf you use <a class="hashtag" href="https://infosec.place/tag/vim" rel="nofollow noopener noreferrer" target="_blank">#vim</a> to edit <a class="hashtag" href="https://infosec.place/tag/ghidra" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> sources, beware that some build scripts try to handle all files in a directory, so .swp’s can cause build errors. <a class="hashtag" href="https://infosec.place/tag/protip" rel="nofollow noopener noreferrer" target="_blank">#ProTIp</a>(Neovim stores swap files under your config directory by default, so the situation is better there)

卡拉今天看了什麼Under the microscope: Ecco the Dolphin — Defender of the Future<blockquote><a href="https://readhacker.news/s/6hBnW" rel="nofollow noopener noreferrer" target="_blank">Link</a></blockquote>📌 Summary: 本文探討《海豚艾可：未來的捍衛者》中隱藏的作弊功能，這些功能通過特定的存檔名稱激活。使用Ghidra和Python進行逆向工程後，作者發現了多個特殊名稱及其對應的效果，如「不死模式」和顯示FPS。文中詳細介紹了作弊的激活方式及其背後的編碼機制，並指出雖然部分名稱可以解鎖相同的功能，但仍有一個名稱（POPELY）不明其用途。最後，作者提到有其他文章深入探索未知的作弊代碼。 🎯 Key Points: - 《海豚艾可：未來的捍衛者》含有多種激活作弊功能的名稱。 - 使用Ghidra分析後，發現了特殊名稱與相應效果的關聯。 - 每個特殊名稱可以解鎖不同的功能，例如：不死模式、顯示FPS、以及搶球遊戲。 - 透過暴力破解和Python程式確定其他特殊名稱的效果。 - 名稱POPELY的具體效果尚未確認，可能為「無效」。 🔖 Keywords: <a href="https://social.mikala.one/tags/海豚艾可" rel="nofollow noopener noreferrer" target="_blank">#海豚艾可</a> <a href="https://social.mikala.one/tags/作弊代碼" rel="nofollow noopener noreferrer" target="_blank">#作弊代碼</a> <a href="https://social.mikala.one/tags/逆向工程" rel="nofollow noopener noreferrer" target="_blank">#逆向工程</a> <a href="https://social.mikala.one/tags/Ghidra" rel="nofollow noopener noreferrer" target="_blank">#Ghidra</a> <a href="https://social.mikala.one/tags/暴力破解" rel="nofollow noopener noreferrer" target="_blank">#暴力破解</a>

IT NewsMOTU Audio Interface Resurrected After Some Reverse Engineering - These days, when something electronic breaks, most folks just throw it away and ge... - <a href="https://hackaday.com/2024/10/18/motu-audio-interface-resurrected-after-some-reverse-engineering/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hackaday.com/2024/10/18/motu-audio-interface-resurrected-after-some-reverse-engineering/</a> <a href="https://schleuss.online/tags/reverseengineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reverseengineering</a> <a href="https://schleuss.online/tags/audiointerface" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#audiointerface</a> <a href="https://schleuss.online/tags/repairhacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#repairhacks</a> <a href="https://schleuss.online/tags/linuxhacks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxhacks</a> <a href="https://schleuss.online/tags/firmware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firmware</a> <a href="https://schleuss.online/tags/ghidra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ghidra</a> <a href="https://schleuss.online/tags/hack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hack</a> <a href="https://schleuss.online/tags/motu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#motu</a>

Recent searches

Search options

Administered by:

Server stats:

#ghidra