Fine. You win. You can now hire one of our reverse engineers or malware analysts for tailored file analysis. Go break stuff: malcore.io/hire-us

learn C this weekend. you've got nothing better to do: bible.malcore.io/rea...

Holy shit that’s me

Today we are releasing our FREE educational course: "Intro to Exploit Dev"! This course is perfect for those trying to start exploit dev and covers: - Tooling - Fuzzing - Exploitation techniques - And more! You can take the course here: bible.malcore.io/readme/the-b...

PCEF just got its EIN meaning it’s officially a company! In order to get tax exempt status we need 500 USD. Please consider donating here: donorbox.org/malware-bibl... All donations go straight to getting us tax exempt status and the Bible content.

If they say it wasn’t the firewall it was the firewall

The OpcodeMarket forum is online again! You can find it here: om.malcore.io Unfortunately we have to start from scratch due to issues with the provider last time. I have a list of user emails so everyone that had an account will be sent an an invite email!

The Malware Bible is now opensource! Make PR’s and issues as you see fit: github.com/Perkins-Fund...

We're making WAF ez

What’s poppin

The Malcore AI classifier currently has a 98.56% accuracy rate on Windows PE files. It has a 96.54% accuracy rate on ELF files. And (not in prod yet) has a 80.33% accuracy rate on APK files.

Logically equivalent xor. Use this as a replacement for xor to allow you to evade detection.

Happy new year nerds. I hope your year is filled with success and happiness, and thank you for making this year so special for us at Malcore. We love you all!

She’s a 10 but she uses xor eax, eax

My goals for 2025: - Have Malcore’s analysis engine be able to use GPU - Retrain the Malcore AI with billions of samples - Make an endpoint specifically for detection using the Malcore AI to allow easy determination of file maliciousness

What are you doing for the holidays?

What’s poppin?

Evasion technique time! Today we are discussing API hammering! API hammering is when malware repeatedly called benign APIs to try and detect delays caused by hooks or monitoring overhead. This simple example shows how it can be done!

Malcore is down all day, and idk what to do with my life… Like wtf do I do now???

Hi! Our provider is upgrading their data center to host more servers, provide more VPS's, and add more amperage. Because I don't want to wake up at 6am Malcore will be down until Thursday. We love you thank you so much!

All I do is work but I’m unemployed

Meet the piece of shit @sh0ckfr.bsky.social He deleted the post but you can find him @Sh0ckFR on X. TL;DR: vxug giving away almost 100k in shit, this dude bitches about it.

I made a code paste site on Malcore at code.malcore.io! Features include: - Full syntax highlighting - Code is downloaded as a file - Link is automatically copied to your clipboard - Code beautification - COMPLETELY FREE Enjoy, and more to come later on!

Hi, we just started a VPS service for as low as $2.99 per month! Find out more here: backyardbandwidth.com

Hi! We are upgrading the data center, so Malcore will be down all day on the 17th. Getting more amps and more servers.

Continuing on with our evasion techniques today I will be showing you API hook evasion! This simple example shows how you can create a file using a system call without using the Windows native CreateFile function, bypassing most API hooks AV or EDR have setup on user-mod API's!

Even my Christmas ornaments are giraffes

Hey! Buy Malcore stuff, I’m out of cocaine. Plans: malcore.io/pricing Merch: merch.malcore.io Buy me a “coffee”: ko-fi.com/malcoreio Thanks <3

A few years ago during the ransomware summit at the Whitehouse, I was given a X-PHY PCIe M2 2280 1TB SSD. This SSD contains “embedded AI” to detect and prevent ransomware and other attacks. Well my NDA expired so I’m gonna be reversing it, starting tomorrow! Links below👇

Malcore is a lifestyle. app.malcore.io/register

Hi nerds! The forum is a lot more complicated than I was expecting it to be. I’m working on it, in the meantime almost all of Malcore is onprem now! Bible will be moved to onprem next, and the advertisements will be added to it. We decided against a registration wall.

Did you know that Malcore has a built in assembly explorer? You can search, scroll to offsets, and view the disassembly of the file straight from your browser!

A more advanced technique of evading detection is for malware to mimic a virtual machine within it's code to execute custom opcodes. This example employees this technique to execute a function to mimic shellcode counting from 1-10.

We are doing another merch collab! We are collabing with Cthulhu_Answers! 30% of ALL profits will go to a charity to help stop domestic violence: beckysfund.org You can buy merch here: merch.malcore.io/collections/... FREE SHIPPING WORLD WIDE!!

Hi nerds! I own a data center!! It’s 150 per U per month starting. You can learn more here: backyardbandwidth.com We also have a VPN for 4.99/month as well send us an email for more info!

Acid giraffe.

Me talking to investors fully knowing I have no idea wtf I’m doing

Pretty famous on infosec bluesky

This is what I see when I do acid.

Stolen from some dude on X

I’m kind of a big deal

What’s poppin?

Giraffes are better than you are Also use Malcore: app.malcore.io/register

Bluesky is just for giraffes