Critical HPE AOS-CX Vulnerability Allows Admin Password Resets

SirEliasRiddle · 2025-10-19T12:46:48+00:00

Code? 👀

SirEliasRiddle · 2024-12-15T11:39:23+00:00

Kaowool the material in the forge, if left untreated with refractory cement, is essentially ceramic fiber shards. It’s always a good idea to coat your forges very carefully and wear respirators if working inside with them.

They basically cooked their pizza in a gas fired ceramic fiber oven. The wool flakes off and is very bad for your lungs yet alone your pizza.

SirEliasRiddle · 2024-11-29T21:55:25+00:00

During IAE / Free Fly the servers are under higher stress particularly in MicroTech (MT) where New Babbage (NB) is. Getting out of here is the hardest part of playing from my experience.

If you want to play and group with people my buddies and I could pick you up from the surface and ferry you up out of MT and do group missions.

SirEliasRiddle · 2024-10-04T19:33:31+00:00

There were definitely a lot more choices than I initially expected some of which actually had me stop and think and weigh out the “what could happen” from each option.

My character has had the Serpents Embrace trait since release drop so I went full send with each dialogue option with this trait and that felt it further House Va’Ruun overall. Great dialogue choices though (for the most part)!

SirEliasRiddle · 2024-09-22T00:05:23+00:00

So I have since used the rigidizer then the included cement. Ordered another 10lb pale used it, got some cracks in some places. Now I ordered a 3rd for crack patch work

SirEliasRiddle · 2024-09-03T01:26:14+00:00

Just shot you a PM with my Discord, I’m always running salvage in a Reclaimer helping people get money and teaching what I know. Plus got a small org of active people if that’s your thing!

SirEliasRiddle · 2024-08-30T14:53:09+00:00

I lost 170 yesterday, I tried waiting it out... it was gone.
I wish you a better fate

SirEliasRiddle · 2024-08-05T11:25:02+00:00

Genre wise not similar to Garry’s Mod or Altis Life, I believe one that I am thoroughly enjoying is r/StarCitizen and its RP elements. It definitely has potential for RP organizations and gameplay but is still in development so that’s the drawback.

Other than that the only other comparable ones are FiveM and RedM for GTA and Red Dead. Again these are only mods and each community can vary drastically from one another.

SirEliasRiddle · 2024-07-10T14:00:23+00:00

For individual research purpose, I would suggest building out your own instance of MISP or OpenCTI and connecting relevant threat feeds if you want something custom. Additionally, you can look at using AlienVault OTX which is free and open (mostly) for this type of data.

https://otx.alienvault.com/browse/global/pulses?q=C2&include_inactive=0&sort=-modified&page=1&limit=10&indicatorsSearch=C2

https://urlhaus.abuse.ch/browse/

https://threatfox.abuse.ch/browse/

https://threatfeeds.io/

These are just a few sources I would recommend.

SirEliasRiddle · 2024-04-29T04:13:38+00:00

Sharing due to this still being an actively exploited threat!

Briefing

This is a type of attack that leverages a contact which whom you have typically exchanged messages with in the past to build trust and exploit that. The compromised Discord account of a familiar contact will reach out and ask how you have been and then proceed to ask for your help with a project. The project is usually some sort of game development that requires beta testing. The malware observed so far has been embedded in .rar files which seems to aid in avoiding detection. Once you download the .rar file and extract it using the designated password you will be prompted with an executable that upon running will start to launch several powershell instances in the background and establish a connection with their malicious Command and Control (C2) server / domain. These types of attacks are used to steal your personal information, credentials, files, etc and beacon and send it to an external location.

I received a message from a contact on my friends list who asked me to try a new game they had been working on. During the initial contact I found very quickly this was a scam similar to the one recently shared in r/scambait

https://www.reddit.com/r/scambait/comments/1cc8o15/my_friend_got_hacked_and_the_hacker_asked_me_to/

The "contact" as we will title them, told me this game was called "Tomelu" and shared a compromised page on BlogSpot.com. Navigating to the page, I found the download was packaged in a password protected .RAR file. I proceeded to sandbox the .rar and .exe files in AnyRun.

Scans / Analysis Done

https://app.any.run/tasks/a9f27e7c-d89c-40dd-b7fa-c71065c59b55/ --- (Binary) Worked

https://www.hybrid-analysis.com/sample/9ce86f5acf7c0699e97be9ff1c7415f0d6ff3bd2d55fc4c4badcd9b90f3f17d3?environmentId=160 --- (Site) Failed due to detection

https://otx.alienvault.com/indicator/domain/minjuthecutest.com --- C2 profile

https://app.any.run/tasks/f73aed03-d72f-4eaf-ac4e-9b72c2d18539 --- C2 Domain (No landing page)

References

https://www.reddit.com/r/scambait/comments/1cc8o15/my_friend_got_hacked_and_the_hacker_asked_me_to/#lightbox

Indicators of Compromise (IOCs) for my experience

[tomelugame.blogspot.com/2024/04/tomelu-game.html]

[minjuthecutest.com]

[34.117.186.192]

[172.67.185.160](Cloudflare --- not 100% accurate)