Max (@sttlr.bsky.social)

Max

@sttlr.bsky.social

My first blog post is up: "Pop a Calc: The Crystal Palace Way" Reinventing msfvenom's Pop a Calc shellcode using Crystal Palace and exploring offensive tradecraft vs capability separation. kerekesha.com/blog/pop-a-c...

kerekesha.comMax KerekeshaFlaneur. Hacker.

Max

@sttlr.bsky.social

18 July

Hi, Raphael @raphaelmudge.bsky.social! I’ve been playing around with Crystal Palace and Tradecraft Garden. I noticed that C-strings don’t get optimized with +optimize. And instead get leftover as a visible IOC.

Max

@sttlr.bsky.social

18 July

For example, when using "run services.spec", I don’t need or use getBSS function - and so it should get optimized with "make +optimize". And it does with the exception of the "Kernel32" string. A rewrite with a stack-string does get fully optimized and doesn’t leave a "Kernel32" string.

You are up to date.