Analyzing Dark Web Malware
Getting the sample
Blas
a personal website
Latest posts
How To Avoid Malware Rabbitholes
An Analysts Journey
For Aspiring Exploit Devs
Today I got motivated reading a blog about reverse engineering so much so that we’re here now and I want to start a series!
shellcode.png
Computer Code Art
RaaSle DaaSle
In the ever-evolving landscape of cyber threats, one nefarious trend has gained notoriety in recent years: Ransomware as a Service. This approach to cybercrime has revolutionized the way criminals operate in the digital realm. In this article, we will delve into the architecture, infection methods, ransomware itself, the service model, and the devastating outcomes associated with Ransomware as a…
Third Author at Oakland
Academia During my last few months as a researcher with the Florida Institute for Cybersecurity Research I helped out on a paper that eventually got accepted to Oakland.
Writing a Security Article
Failing to write an article This is my journey down the rabbit hole that typically consumes me when I try to get started writing an article. I have a list of ideas I want to tackle and hundreds of bookmarks on topics that I find interesting and just want to save later. I was revamping my site and only had two posts prewritten to publish. This is fine but I figured I would get a third one out there…
My First Smart Contract Vuln
Details Late into 2021 me and a few friends created a tool that would download all the smart contracts listed on immunefi and grep through them for one simple and generalizable vulnerability. The vulnerability looked for the value of the second parameter in a function call to swap tokens. If this second parameter was either a 0 or a 1 then it would be susceptible to a sandwich attack.
My First CVE-2021-25461
Discussion I did research with the Florida Institute for Cybersecurity Research for a couple of years and within that time I managed to get a second author paper out titled SAUSAGE. This paper was an analysis of how SELinux policy permissions could be modified on a vendor-to-vendor basis considering manufacturers like Samsung would likely add their own apps into a device which required adding…