Lowyat.NET: Latest topics by WestKid

What is "privileged docker containers"?

WestKid — Sun, 27 Sep 2020 22:58:12 +0800

I am new to Linux , so I am just scratching my head when I saw this:

Does anyone understand what is this? Is this a major breakthrough in his finding?

QUOTE

Turns out privileged docker containers can load kernel modules (which carries over to the host OS) and makes for an easy container escape!

Thanks!

What if u're lonely becoz of not having many peers

WestKid — Wed, 23 Sep 2020 23:56:17 +0800

(Title uses shortform because of limited space allowed, sorry for that)

I don't know how I feel right now, but it all began when I joined a Assembler-optimizing contest last month. I was the winner.
The contest organizer announcing I am the winner in Twitter. Then suddenly some of his followers (who are ethical hacker, InfoSec specialist, RE expert) starting to follow me. I am nobody but an ordinary C# hobbyist (although I learned ASM two decades ago).

Now I am in a difficult situation because a teacher follows a student.....And I am that student.
These people are from US/UK, Israel and some other parts of the world (I cannot be sure because most of them didn't state their location)

It is like I am joining a stranger group where no fellow Malaysians can relate.....
Or true hacker would not show up....I don't know.

As a side note, there are only 4 doctors of this kind in Malaysia.....it would take them at least 18 years to finish study (if I am not mistaken)..... I appreciate their talent but I am not sure if they feel lonely because of not having many peers.

QUOTE

A neuro-ophthalmologist is a doctor who focuses primarily on visual problems, which are related to the nervous system.

What would you do if you were in my situation? (Whoops, I can only post tomorrow because of limited daily quota)

How many InfoSec specialist in Malaysia?

WestKid — Wed, 23 Sep 2020 22:21:05 +0800

QUOTE

The Front Line Applied Research & Expertise (FLARE) team is honored to announce that the popular Flare-On challenge will return for a triumphant seventh year. Ongoing global events proved no match against our passion for creating challenging and fun puzzles to test and hone the skills of aspiring and experienced reverse engineers.

The contest will begin at 8:00 p.m. ET on Sept. 11, 2020. This is a CTF-style challenge for all active and aspiring reverse engineers, malware analysts and security professionals. The contest runs for six full weeks and ends at 8:00 p.m. ET on Oct. 23, 2020.

This year’s contest features a total of 11 challenges in a variety of formats, including Windows, Linux, Python, VBA and .NET. This is one of the only Windows-centric CTF contests out there and we have crafted it to closely represent the challenges faced by our FLARE team on a daily basis.

If you are skilled and dedicated enough to complete the seventh Flare-On challenge, you will receive a prize and recognition on the Flare-On website for your accomplishment. Prize details will be revealed later, but as always, it will be worthwhile swag to earn the envy of your peers. In previous years we sent out belt buckles, replica police badges, challenge coins, medals and huge pins.

Check the Flare-On website for a live countdown timer, to view the previous year’s winners, and to download past challenges and solutions for practice. For official news and information, we will be using the Twitter hashtag: #flareon7.

As for myself, I am still stuck in challenge #2.

I see there were 13 Malaysians on the scoreboard. There is one guy from Dell Malaysia ranked the 54th yesterday....Terrific skill he has had!

I wonder how many cyber security specialist or reverse engineer in Malaysia?

This contest will need to reverse-engineer PE, ELF, MSIL, VBA format..... The challenge #1 is easier, to decrypt the flag in Python code, #2 is fix corrupted PE (Windows EXE) to get the flag.....and so on...

The 7th Flare-On Challenge

WestKid — Mon, 21 Sep 2020 23:21:56 +0800

QUOTE

Smallest console app

WestKid — Sun, 20 Sep 2020 20:40:06 +0800

I wonder where is the need of console app in today face pace digital world. But I think many tools to build your web and mobile app were in CLI (command-line interface) aka console app?

Today I am going to showcase this side-by-side comparison to generate the smallest "Hello World" console app between
1) Free Pascal
2) C# .NET
3) L (I will keep this a secret for awhile)

So here goes:

1. Free Pascal
Generate standalone console app for i386-win32

Source code:

CODE

begin
WriteLn('Visit Malaysia 2020');
end.

Look, I actually tweaked the compiler option so that it will generate smaller code.

And what we get...

CODE

C:\FPC\3.2.0\bin\i386-win32>dir p.*
Volume in drive C has no label.
Volume Serial Number is F88E-6D5F

Directory of C:\FPC\3.2.0\bin\i386-win32

09/20/2020 08:09 PM 49,815 p.exe
09/20/2020 08:09 PM 3,508 p.o
09/20/2020 08:07 PM 48 P.pas
3 File(s) 53,371 bytes
0 Dir(s) 38,108,540,928 bytes free

C:\FPC\3.2.0\bin\i386-win32>

Fantastic, it is 49KB for a simple console app which prints "Visit Malaysia 2020".

Now, let's look at C# .NET.

2. C# .NET
Generate .NET Framework dependent executable

Source code:

CODE

using System;

namespace N
{
class Program
{
static void Main(string[] args)
{
Console.Write("Visit Malaysia 2020");
}
}
}

Now look at what we get:

CODE

C:\Users\bookh\source\repos\N\bin\Release>dir
Volume in drive C has no label.
Volume Serial Number is F88E-6D5F

Directory of C:\Users\bookh\source\repos\N\bin\Release

09/20/2020 08:18 PM <DIR> .
09/20/2020 08:18 PM <DIR> ..
09/20/2020 08:18 PM 4,608 N.exe
09/20/2020 08:14 PM 189 N.exe.config
09/20/2020 08:18 PM 19,968 N.pdb
3 File(s) 24,765 bytes
2 Dir(s) 38,934,638,592 bytes free

C:\Users\bookh\source\repos\N\bin\Release>n
Visit Malaysia 2020
C:\Users\bookh\source\repos\N\bin\Release>

Yay, a 4608-byte console app. I guess it is small because .NET Framework has taken care of everything, which unlike Free Pascal above, you have to cramp everything inside one executable.

So what's next?

3. L
Generate standalone executable which supports PRINT "xxxx" only.

We will run L.exe and see.

CODE

C:\Users\bookh\source\repos\L\bin\Debug>dir
Volume in drive C has no label.
Volume Serial Number is F88E-6D5F

Directory of C:\Users\bookh\source\repos\L\bin\Debug

09/20/2020 07:57 PM <DIR> .
09/20/2020 07:57 PM <DIR> ..
09/20/2020 07:45 PM 2,048 19_45_55.EXE
09/20/2020 07:57 PM 2,048 19_57_16.EXE
09/20/2020 07:44 PM 8,192 L.exe
09/20/2020 07:40 PM 189 L.exe.config
09/20/2020 07:44 PM 19,968 L.pdb
5 File(s) 32,445 bytes
2 Dir(s) 38,933,737,472 bytes free

C:\Users\bookh\source\repos\L\bin\Debug>L
Custom text string: Visit Malaysia 2020
C:\Users\bookh\source\repos\L\bin\Debug\20_21_18.EXE
MapFileAndCheckSumA = 0
CheckSum : 10384

C:\Users\bookh\source\repos\L\bin\Debug>20_21_18
Visit Malaysia 2020
C:\Users\bookh\source\repos\L\bin\Debug>

There you see, the 20_21_18.exe generated by L is only 2048 bytes.

So which is the winner here?

I would like to hear from everybody about your own finding in smallest size of mobile app, WinForms app, or even console app in C++.

Sorry for this boring stuff as I am jobless at the moment...

Source code and binary executable will be available only upon request.

No more StackExchange app

WestKid — Sat, 19 Sep 2020 14:44:46 +0800

Now they discontinued StackExchange mobile app and encourage users to access website instead.

StackExchange has many subforums to post question and answer, StackOverflow is one of it.

I think it is weird that they actually opt out of mobile version... Now I can no longer download it from Google Playstore, it says "Item not found".

Things I can & can't control (Picture)

WestKid — Wed, 16 Sep 2020 14:12:22 +0800

Taken from hospital.

https://pictr.com/images/2020/09/16/7p2eWn.jpg