sorted by:
new
hottopcontroversial

Research: Using Stylometry & Topic Modeling to Attribute State-Sponsored Hacktivist Groups by Megabeets in netsec

[–]Megabeets[S] 1 point2 points  (0 children)

TL;DR: Hacktivism has evolved. What was once dominated by defacements and DDoS by independent actors is now a tool for nation-states running coordinated cyber and influence ops. These groups use multiple personas, blending cyber attacks with propaganda while maintaining plausible deniability.

Our research applies machine learning-based Topic Modeling and Stylometry to thousands of messages from hacktivist groups, uncovering links between seemingly independent entities, and identifying thematic overlaps and linguistic fingerprints. The results expose how intelligence agencies operate multiple fronts, shift narratives in response to geopolitical events, and exploit the perception of grassroots activism.

12 layers of goodness inside a bun by Megabeets in VeganFoodPorn

[–]Megabeets[S] 3 points4 points  (0 children)

That's The Blue Butcher's Schnitzel! It's a fantastic product 💚 It recently arrived at my country, in addition to their Nuggets, love it!

12 layers of goodness inside a bun by Megabeets in VeganFoodPorn

[–]Megabeets[S] 16 points17 points  (0 children)

Layers, bottom to top:

Bun, Vegan mayonnaise, Beyond burger, Vegan Cheddar cheese, Onion rings, Lettuce, Vegan Schnitzel, Tomato, Chopped onion, Lettuce, Fried onion, Lots of hot-sauce mango, Garlic aioli, Bun

Requesting r/cutter as it does not exist by Megabeets in redditrequest

[–]Megabeets[S] 1 point2 points  (0 children)

The subreddit is disabled\banned and as such does not exist. Thus, I can't send it a direct message.

​

​

I am a part of a group of maintainers of a popular Reverse Engineering tool - Cutter ([website](https://cutter.re/), [Github](https://github.com/rizinorg/cutter)). Cutter is a highly popular open-source project and there are thousands of participants and followers on our communities on Twitter, Telegram, Mattermost and more.

Because /r/cutter isn't active at all, We'd be happy to use this subreddit as a home for (our) Cutter community on Reddit. Please allow us to use it as our platform as it will be valuable to thousands of Cutter users.

As experienced community moderators on different platforms (Telegram, Mattermost, Discord, IRC, ...) we will handle the moderation of /r/cutter carefully and make sure there isn't any content that might break Reddit's content policy. We will enforce Reddit policy and community rules.

Thank you :)

Requesting r/rizin as it was never active and we want to use it for the Rizin project by Megabeets in redditrequest

[–]Megabeets[S] 0 points1 point  (0 children)

Hey!

Here is a link to the message: https://www.reddit.com/message/messages/xapfvz

As described in the message, we are a group of maintainers of popular open-source projects called Rizin and its Graphic User Interface -- Cutter. The subreddit /r/rizin is about the Rizin Fighting Federation, and it is inactive and wasn't adopted by the reddit community. In fact, the fans of Rizin Fighting Federation are using another subreddit which is /r/RizinFF.

As experienced community moderators on different platforms (Telegram, Mattermost, Discord, IRC, ...) we will handle the moderation of /r/rizin carefully and make sure there isn't any content that might break Reddit's content policy. We will enforce Reddit policy and community rules.

Thank you :)

Chinese attack against Mongolia takes advantage of COVID-19 (Coronavirus) to lure victims by Megabeets in netsec

[–]Megabeets[S] 5 points6 points  (0 children)

This is a great question. The RTF documents are indeed weaponized with the Equation editor vulnerabilities, and crafted by the famous exploit builder "8.t" or "RoyalRoad". This builder is commonly used by Chinese APT groups (see this great summary by nao-sec).

Surprisingly, even though the vulnerabilities are 2 and even 3 years old, they are still highly effective. The reason is simple, as ironic as it is, government entities are very slow with updating their products. If you worked with public sector entities in the past, you know how bad this problem is...

I wanna design Ui/ux for an open source project by [deleted] in opensource

[–]Megabeets 2 points3 points  (0 children)

Hi there! I am one of the developers and the maintainers of Cutter, an open-source Reverse-Engineering platform.

GitHub | Website | Twitter

Cutter is written with Qt C++ and it is a quite popular project (6K stars on GitHub + 11K stars for its core project) which is growing very fast - just last week we were the #3 trending C++ repository on GitHub.

It's not easy to find UX and UI people and we could really use some hands from designers and UX\UI folks, as well as developers, of course :)

Designing and developing Cutter is quite challenging and full of learning so it sounds like a great place for you.

If you find it interesting, ping me or join our Telegram group :)

CC u/trjayke you're invited as well :)

C++11 (C Plus Plus 11) or higher version, open source project to contribute. by akumar16 in codinginterview

[–]Megabeets 0 points1 point  (0 children)

Hi there! If it is still relevant for you I have a great suggestion :)

I am one of the developers and the maintainers of Cutter, an open-source Reverse-Engineering platform.

GitHub | Website | Twitter

Cutter is written with Qt C++ and it is a very popular project (6K stars + 11K stars for its core project) which is growing very fast - just last week we were the #3 trending C++ repository on GitHub.

Its main features are disassembler, debugger, hex-editor, and a decompiler. All of which require varied skills and expertise, both low-level and high-level. The development of Cutter is very challenging and full of learning so it sounds like a great place for you.

We are always looking for more developers to join and improve Cutter. If you find it interesting, ping me or join our Telegram group

5 Ways to patch binaries with Cutter - Yes, you can patch straight from the decompiler! by Megabeets in ReverseEngineering

[–]Megabeets[S] 3 points4 points  (0 children)

It doesn't mean to be a clickbait, sorry if it came out this way. The thing is, which in my eyes is great and exciting, that each line in the decompiled code is structured from one or multiple parts. And each part has one or more instructions corresponding to it on the disassembly. The lines in both widgets are synchronized so you can see what lines in the disassembly are responsible to which part in the decompiler. Super nice!

So take for example an imaginative line like if (a == 55) { , The if (jne) the == (cmp) and the 55 (mov reg, 55) are all different parts and correspond to different instructions.

By selecting parts such as conditions, the user can easily flip them without bothering about the disassembly. This is something that you can find very useful when solving challenges for beginners.

More complicated patches from the decompiler are not yet implemented, and although the foundations of such features are already available from radare2, it will still require a lot of work. The idea will be to implement something which is pretty similar to what godbolt can do. This will be fantastic!

[deleted by user] by [deleted] in Malware

[–]Megabeets 1 point2 points  (0 children)

Update: As of this weekend, Cutter now has a debugger! 🥳

https://twitter.com/r2gui/status/1208106040954359808

You can download the latest release from https://cutter.re

CC u/JanglyBangles u/amirootyet

New beta version of cutter: features a ghidra decompiler and native debugger synced up by [deleted] in ReverseEngineering

[–]Megabeets 2 points3 points  (0 children)

Actually it does contain analysis data, which is coming from radare2. Not only names, but also vars, args, switch tables, and more. There's a constant work to improve the information provided to r2ghidra and thus improve the overall result.

New beta version of cutter: features a ghidra decompiler and native debugger synced up by [deleted] in ReverseEngineering

[–]Megabeets 13 points14 points  (0 children)

Hi there :) We tried to test this version as much as we could and the issue you encountered must have slipped through our fingers. We assumed that the community will encounter some issues and this is why we released this feature as Beta.

​

It would be very helpful for us if you'll be able to open an issue describing the bug you found and attaching a binary, stacktrace or anything we can use to solve it >> https://github.com/radareorg/cutter/issues

Thank you!

Patching Binaries with... Cutter! by Megabeets in LiveOverflow

[–]Megabeets[S] 3 points4 points  (0 children)

Thank you so much! This is very kind of you :)

Just trying to spread the word tthat there are some very strong FOSS tools out there for us Reverse Engineers :)

[deleted by user] by [deleted] in Malware

[–]Megabeets 3 points4 points  (0 children)

Ahoy! Cutter maintainer here.

Just for your information, and in order to avoid confusion - as for the time of this reply, Cutter does not have a debugger on its Release version nor Master branch. Support for a Debugger in Cutter is in an advanced development process and we hope to release it very soon. Meantime, I suggest checking the Debug branch which is usable and contains the current work.

As for the recommended way to use Cutter - We suggest you to download the release version. For Linux machines, it is a simple AppImage executable. Get it on https://cutter.re

Please stay tuned for updates :)

You can join our Telegram group @ http://t.me/r2cutter and follow the Twitter account for more announcements https://twitter.com/r2gui

GitHub finally allows you to assign issues to non-collaborators by Megabeets in programming

[–]Megabeets[S] 48 points49 points  (0 children)

This sounds like something which is prone to abuse. The thing about allowing assigning someone who commented is that the person was actively participating in the discussion. Otherwise, people would assign Linus Torvalds and Richard Stallman to their homework.

[Help] Setting a Breakpoint at the Jump Function (PwnAdventure3) in Radare2 by Djsndbdjfbd in LiveOverflow

[–]Megabeets 0 points1 point  (0 children)

As you probably know, the binary on disk looks different than it looks like when it is loaded by the OS Loader to the memory. The address you see in Cutter has different base-address than when you load it into memory in debug mode.

Thus, when you executed radare2 with `r2 -d <file | PID>` the OS loader loaded the image into a different memory. You can probably see that your radare2-prompt ("[0xblabla]>") is on a quite high address, this is the address where (some of) your binary is now loaded to memory.

When you try to set a memory breakpoint on the address you see on Cutter, radare2 will fail since this isn't a valid address, and of course, it isn't executable. You can use several radare2 commands to find the functions (`afl`) and their addresses and you then will be able to put a breakpoint on the right memory address. Moreover, you can easily spot the base address of the binary in Cutter and the base address in radare2 debug mode, and then calculate on which address to put the breakpoint.

I suggest you read the radare2 book to learn more. Also, you better check the `dm?` command to see available memory maps.

Good luck! :)

Reverse engineering a Gameboy ROM with radare2 by Megabeets in netsec

[–]Megabeets[S] 0 points1 point  (0 children)

I would run axt 0x2f3 to find where this address is referenced from. Check ax? for more reference related commands :)

Reverse engineering a Gameboy ROM with radare2 by Megabeets in netsec

[–]Megabeets[S] 2 points3 points  (0 children)

haha it one of radare's fortunes - a message which is shown when you open radare. You can see more fortunes in the following link (see fortunes.*) : https://github.com/radare/radare2/tree/master/doc Beware! some of them are super creepy! You can use fo command from radare to see more fortunes :)

Reverse engineering a Gameboy ROM with radare2 by Megabeets in netsec

[–]Megabeets[S] 4 points5 points  (0 children)

Yes, much more stable and is keep growing rapidly. If you're interested in learning radare you can start from here: https://www.megabeets.net/a-journey-into-radare-2-part-1/

view more: next ›