kilianc

3 ms·

1. 1.▲
   Let’s Go (VS) Code – Red Team Style(badoption.eu)

   2 points by kilianc 4y ago|1 comments
2. 2.▲
   by kilianc 4y ago

   The Microsoft signed and hosted Reverse Shell TL;DR; MS is offering a signed binary (code.exe), which will establish a Command&Control channel via an official Microsoft domain https://vscode.dev . The C2 communication itself
3. 3.▲
   HP Enterprise Nears Deal to Buy Cray(bloomberg.com)

   55 points by kilianc 7y ago|1 comments
4. 4.▲
   by kilianc 7y ago

   True, that could have used a TL;DR, agreed.
5. 5.▲
   by kilianc 7y ago

   True, but then you would loose all the coloring. By targeting only the attributes that generate additional syscalls, you can keep the vast majority of the colors and get a nice speed bump. Win win.
6. 6.▲
   by kilianc 7y ago

   Yes, it leaves all of the default coloring, except for the bits that require additional syscalls, that is: executable permission, setuid/setgid bits, and file capabilities.
7. 7.▲
   by kilianc 7y ago

   Precisely. We want colors. We're refined people.
8. 8.▲
   by kilianc 7y ago

   Good point! But sometimes a large-scale parallel filesystem can't beat a local SSD on certain patterns. Also, we didn't see any timings for that 1,000x claim, so let's say it's an estimate. :)