k being “call stack” in windbg and “kill process” in lldb is a cruel, cruel collision. Thanks Tim apple

All Azure users are hereby authorized to start Halloween early

even wearing my flynn's arcade shirt to the theater wasn't enough to save that movie ;( great vfx, great soundtrack, bad movie. long live tron: legacy, the only sequel to tron.

when i find who wrote iso 32000 7.6.4.3.3/.4 - i'm not mad, i just want to talk #flareon

if i see someone wearing these i'm going to respectfully and politely hulk smash them (the glasses) into the sidewalk

"ai is going to change everything" dawg this is a bunch of "while true; do curl xxxxxxxxxx"

threw together a quick first blood discord bot for CTFd for an event im hosting next week gist.github.com/captainGeech...

working on a simple web chal and was too lazy to write the ui myself, gemini almost turned this into a second challenge 🙃 age of llm==age of free xss?

Being in tech and having a single modicum of critical thinking is just screaming "this isn't what LLMs are designed for" over and over as people shove a bunch of word predictors into critical decision making processes because some glorified used car salesmen told them it would fix all their problems

I wrote a new blog with Mandiant IR + FLARE on some new intrusion activity by a group we track as UNC6148, likely using a mix of n-day and 0-day exploits to compromise SonicWall SMA 100 series VPN appliances. They have some nifty post-exploitation tooling as well cloud.google.com/blog/topics/...

Signal sticker pack metadata is fun signal.art/addstickers/...

the true GOAT

if you need to use AggresIve styling, dark patterns, popups, and anti-user defaults to get people to use your new features, maybe they are not good features :)

there is something so satisfying about writing rop chains, idk what it is, just a super fun puzzle

Picked a bad day to wear my Corellium t-shirt smh ☠️ techcrunch.com/2025/06/05/p...

I wrote some details on LOSTKEYS: malware which we directly attribute to COLDRIVER. They don't deploy it often, but we have seen it a few times and want to make people aware of it. cloud.google.com/blog/topics/...

why more JS engines don't have a native bogosort implementation is truly a wonder

"And this is why using AppContainer with a packaged app is easier" screw you microsoft i do what i want learn.microsoft.com/en-us/window...

if you despise using Visual Studio as much as i do, here you go github.com/captainGeech...

Too many OPSEC experts out there, I’m an OOPSEC expert. Lmk if you need help adding The Atlantic to YOUR pc small group chats. Signal and more!

hey microsoft, hot take, what if you didnt push ads for random games in your fucking operating system as notifications

diaphora vs vmware-vmx meanwhile, me watching:

arrested development season 1 is the true peak of comedy

lmfao this worked perfectly. thank you to "brute force to make up for my lack of brain cells"

reverse engineering and thinking about reducing problem spaces to hit vulnerable code paths is hard. fuzzing however, is both "easy" and "fast" - lazy ftw (may work, may not work, we'll see. need a @digitalocean.com sponsorship lol)

my arch laptop hasnt crashed once since districtcon and has been busy since then, so im just going to chalk it up to "cold dark room is scary to gnome" and pretend this never happened see you at the next talk where it will inevitably happen again

Department of Government Efficiency

Now that my @districtcon.bsky.social talk is over, here is the official open-source release of implant.js! I think this represents a notable advancement in the state of the art for modular CNO implant frameworks. Lots of detection info included as well. github.com/captainGeech...

today i used a debugger so bad that you have to nop sled it when inserting breakpoints to ensure they get hit in the place you want. yes i wrote the debugger but thats besides the point

If you want your own IDA sticker, come find me @districtcon.bsky.social ;)

This latest blog from Cyfirma on Cl0p/Cleo exploitation is utter garbage, ignore it. LLM YARA rule (not even valid syntax), massively inflated statistics, and misleading IOCs and analysis. www.cyfirma.com/research/cl0...

c plus plus, more like c plus sucks

We're officially 1 month away from DistrictCon Year 0! Check out our agenda for talks, exploits, round tables, and more! www.districtcon.org/agenda

new startup idea: "Rate my API" you send me your spec and i tell you how bad it is. only $300/hr its like mckinsey for your swagger docs. "lay off 20% of your endpoints"

graphql, more like garbageql

I will be speaking at #DistrictConYear0 on some interesting modular implant development I've been doing, hope to see you all there!

hello there