DEF CON 24 - int0x80 - Anti Forensics AF

[@disk0__]

god this guy is an *_epic_* memer

[@PP-PIG]

lol that one guy laughing so loud whenever a goat pops up

[@svampebob007]

it's not that he laugh loud, it's that he's the only one laughing

[@larva5606]

Liam McKimm it's the ostrich from family guy

[@hmm-.-]

Come on guys, it's fake laugh ffs.

[@gryfflp436]

The Meme is strong with this one.

[@nikolascoleman]

Gryff LP indeed. The meme God's have blesses him

[@henke37]

First 20 minutes in five words: Memset the PE/ELF header.

[@samwansitdabet6630]

Implementable in less then 10 lines of C

[@wilwilson8146]

All the goats were worth the final goat

[@jaykoerner]

damn didn't know that the rapper in dual core actually knew his shit.

[@astromkarl]

I like this presentation but there's too much talking between the goats :)

[@zonewarwarzone4943]

What do you mean you have to only turn off Android device when its encrypted and kill chains broken? I had pattern lock when LEA sized my device, will this be enough to protect me?

[@FenkaiMike]

Damn, that was a great talk!

[@samwansitdabet6630]

ngl I enjoyed the talk but the contents were slightly underwhelming. You can delete the PE headers of your file with about 10 lines of C (you don't need any error handling for it) and it will get you shut down instantly by any half decent AV, because of runpe detection

[@Thiago1337]

D O I L L E G A L T H I N G S

[@thedoctor226]

what is the tool he used to show the malware on windows?

[@not5123]

The Man They Call Jayne IDA pro.

[@dogemaester]

why does it feels like he regrets adding the goats when it plays? Is it like he thought it was a good idea, but now he doesnt, and he can't skip the goat coz he shown it already?

[@samwansitdabet6630]

I would regret it too

[@recklessroges]

Three talks in one. Bargain + memes.

[@PaulBadman]

Oh Shit supp Int80

[@wizkidme]

its dat boi!

[@wkingston1248]

17:56 Don't optimize your malware. Its called MALware for a reason ;)

[@samwansitdabet6630]

I think you meant to say "secure", optimization is good to have on malware obviously so you can do whatever you need to do faster and less detectable. Malware coded purely to mess up your day is basically dead

[@J33pMan]

I saw this exact presentation at Hope XI last year. The presentation was good, but he has an odd obsession with goats which got pretty annoying by the third one.

[@fiarubold]

I still don't understand why someone would make a career based around creating software to ruin people's day.

[@LiftedGamingLoL]

Nano same reason people make careers finding ways to detect and disable those types. Technology and security both benefit from it. There is morality to black hat.

[@jakeevans7016]

You don't understand the fundamentals behind this. It's to help security researchers to make malware analysis tools better. The assholes aren't the ones that publish their work, it's the ones that get away with shit until they get caught. It's a tongue and cheek battle that makes the average person (you) become a victim of both the researchers and the malware developers.

[@samwansitdabet6630]

Also not all malware writers do it as a job, some do it is a hobby. VXers, like Leurak, the creator of Memz, who keep it ethical and DON'T FUCKING DISTRIBUTE IT LIKE THE GREEDY WANKERS WHO WILL ANNIHILATE YOUR DAY FOR A FEW HUNDRED and make it interesting and cool looking instead. VXers who distribute are not proper VXers and are what's known as arseholes sorry for going off on a tangent

[@timewave02012]

It's not just software. We do the same thing engineering deadlier biological viruses to test more effective vaccines.