codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Went to BSides Pyongyang
Remote
codecolorist
@codecolorist@infosec.exchange
0
Followers
0
Following
25
Posts
Joined November 04, 2022
Twitter:
Blog:
GitHub:
Posts
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Every time I visit Singapore I complain about hot and humidity. Now Beijing has joined the chat…
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Almost 8 months later I finally have home internet
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Apple bans ipatool so strictly that even geniune Apple Configurator is not able to login
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Did a bit of follow-up to my 0x41con talk to download another industrial standard non linear editing solution.
Just incredible. It runs some 2000-ish java server code as root on desktop version, and easily popped an preauth rce (root) from network.
Can't believe this full of bugs solution edited so many Oscar winners
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
I pity for whoever makes the decision to dump Launchpad for the jitter Spotlight. He or she must have suffer a lot from life, terrible married life, childhood trauma and brain issue.
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Another ADHD:
Added file history and diff view to entitlement database
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Getting serious ADHD and building software nobody asked.
checksec for Mach-O
https://github.com/ChiChou/macchk
⚠️ Warning: vibe coded
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
对 iTunes 把华语和日韩歌曲一律改成罗马化拼写的弱智行为忍无可忍，写了个脚本导出 Apple Music - gemini 清洗数据 - 批量重命名 iTunes 库
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake with xref and control flow now 
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@ahmethan@infosec.exchange
@ahmethan thank you so much!
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake no, I grab plain build from wasi-api to avoid GPL issues. For r2hermes it’s only a plain emcc build
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake one request.. r2hermes xref eta wen 
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@AbhiTheModder@defcon.social
@AbhiTheModder https://github.com/ChiChou/grapefruit/blob/b4013b7009efae8521c39d0fc715e60481ad3381/gui/src/components/shared/CFGView.tsx dagre
and you need to replace agfm with agfj
https://github.com/ChiChou/grapefruit/commit/08ff575d42360e1a097ac38a0e8fbce8985ad9cb#diff-f159b0ab752795015d7b392012e6e895d4a8e6e2d071ac592ec3f151d3b6a9f8R18-R92
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@Viss@mastodon.social
@Viss this thing should be easy to learn, especially with llm. You might have some problem with RASP for real world apps because all of them try to hide the binary from reverser now
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake :-> reinventing goes too far
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake hermes is done
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Double tap on iOS is for zooming in and out. Any app that maps this gesture to like should be taken down if App Store review ever makes sense
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
frida recently shipped strace, so I piped it to Wireshark again
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@Viss@mastodon.social
@Viss yes
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake will eventually have them but now I haven’t figure out how to even extract dark bytecode from runtime
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake I'd digg the rabbit hole to put hermes plugin first 
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake Mobile Pentester IDE wannabe
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@pancake@infosec.exchange
@pancake can’t wait to integrate it with my web tool
codecolorist
@codecolorist@infosec.exchange
infosec.exchange
Replying to
@jiska@chaos.social
@jiska in terms of syntactic sugar, cy is way better than js, who can’t even handle 64bit numbers without thinking twice