ramkumar
@ramenhost.dev
Security Software Engineer. Forever toggling between being a jack of all trades and a master of one.
Blog: https://ramenhost.dev
Blog: https://ramenhost.dev
Incredible attack vector with shell injection in branch name to compromise deployment CI and deliver cryptocurrency miner in published PyPI packages.
December 7, 2024 at 6:45 PM
Incredible attack vector with shell injection in branch name to compromise deployment CI and deliver cryptocurrency miner in published PyPI packages.
I've been writing C for 8 years and have confidently downcast pointers after checking for value overflow. TIL that typecasting pointers to a smaller datatype works on little-endian architectures. It's obvious why this doesn't work on big-endian systems, but I learned it the hard way.
November 12, 2024 at 7:32 AM
I've been writing C for 8 years and have confidently downcast pointers after checking for value overflow. TIL that typecasting pointers to a smaller datatype works on little-endian architectures. It's obvious why this doesn't work on big-endian systems, but I learned it the hard way.
It turns out my PR is more of a test fest than a feature feat, with twice as much code dedicated to making sure everything works.
November 10, 2024 at 2:05 PM
It turns out my PR is more of a test fest than a feature feat, with twice as much code dedicated to making sure everything works.
Windows update broke accessing dev drives from WSL and Docker Desktop. 😭
November 8, 2024 at 2:22 PM
Windows update broke accessing dev drives from WSL and Docker Desktop. 😭
I am wondering if this belongs to a popular trojan family. couldn't find anything on "rjhpe" reported by Virustotal. https://x.com/ramenhost/status/1840287912908468500/photo/1
November 8, 2024 at 4:23 AM
I am wondering if this belongs to a popular trojan family. couldn't find anything on "rjhpe" reported by Virustotal. https://x.com/ramenhost/status/1840287912908468500/photo/1
Java wants to replace Python as the language for AI.
y'all think this possible? https://twitter.com/java/status/1838946561042076007 https://x.com/ramenhost/status/1839371092429095117/photo/1
y'all think this possible? https://twitter.com/java/status/1838946561042076007 https://x.com/ramenhost/status/1839371092429095117/photo/1
November 8, 2024 at 4:22 AM
Java wants to replace Python as the language for AI.
y'all think this possible? https://twitter.com/java/status/1838946561042076007 https://x.com/ramenhost/status/1839371092429095117/photo/1
y'all think this possible? https://twitter.com/java/status/1838946561042076007 https://x.com/ramenhost/status/1839371092429095117/photo/1
bunch of println not working and you finally need to set up a debugger. https://x.com/ramenhost/status/1839146971946430772/photo/1
November 8, 2024 at 4:22 AM
bunch of println not working and you finally need to set up a debugger. https://x.com/ramenhost/status/1839146971946430772/photo/1
Working in infosec 🤝 Running CTF binaries
on primary machine https://x.com/ramenhost/status/1838260605117194323/photo/1
on primary machine https://x.com/ramenhost/status/1838260605117194323/photo/1
November 8, 2024 at 4:22 AM
Working in infosec 🤝 Running CTF binaries
on primary machine https://x.com/ramenhost/status/1838260605117194323/photo/1
on primary machine https://x.com/ramenhost/status/1838260605117194323/photo/1
Writeups for the 14 challenges I did in @masoncompcyber Patriot CTF 2024.
https://ramenhost.github.io/posts/ctf-writeup-patriot-ctf-2024/ https://x.com/ramenhost/status/1838184129676112229/photo/1
https://ramenhost.github.io/posts/ctf-writeup-patriot-ctf-2024/ https://x.com/ramenhost/status/1838184129676112229/photo/1
November 8, 2024 at 4:22 AM
Writeups for the 14 challenges I did in @masoncompcyber Patriot CTF 2024.
https://ramenhost.github.io/posts/ctf-writeup-patriot-ctf-2024/ https://x.com/ramenhost/status/1838184129676112229/photo/1
https://ramenhost.github.io/posts/ctf-writeup-patriot-ctf-2024/ https://x.com/ramenhost/status/1838184129676112229/photo/1
Good CTF run this weekend with @masoncompcyber
Now, it's time to focus on the write-ups. https://x.com/ramenhost/status/1838059135524536355/photo/1
Now, it's time to focus on the write-ups. https://x.com/ramenhost/status/1838059135524536355/photo/1
November 8, 2024 at 4:21 AM
Good CTF run this weekend with @masoncompcyber
Now, it's time to focus on the write-ups. https://x.com/ramenhost/status/1838059135524536355/photo/1
Now, it's time to focus on the write-ups. https://x.com/ramenhost/status/1838059135524536355/photo/1
What the heck is a Yubikey and why did I buy one? https://x.com/ramenhost/status/1831682686529757629/photo/1
November 8, 2024 at 4:21 AM
What the heck is a Yubikey and why did I buy one? https://x.com/ramenhost/status/1831682686529757629/photo/1
I feel super lucky to have worked with some of the brilliant minds at Samsung. If you're into 5G or high-performance packet processing, give it a read. It was a massive learning experience for me!
https://t.co/yjVeRGAQLY
(I no longer work there) https://t.co/ytmPoZ9vaT
https://t.co/yjVeRGAQLY
(I no longer work there) https://t.co/ytmPoZ9vaT
November 8, 2024 at 4:21 AM
I feel super lucky to have worked with some of the brilliant minds at Samsung. If you're into 5G or high-performance packet processing, give it a read. It was a massive learning experience for me!
https://t.co/yjVeRGAQLY
(I no longer work there) https://t.co/ytmPoZ9vaT
https://t.co/yjVeRGAQLY
(I no longer work there) https://t.co/ytmPoZ9vaT
From @schneierblog on the theoretical limit of brute-forcing. https://twitter.com/khyperia/status/1818965626645364754 https://x.com/ramenhost/status/1819327214275776918/photo/1
November 8, 2024 at 4:21 AM
From @schneierblog on the theoretical limit of brute-forcing. https://twitter.com/khyperia/status/1818965626645364754 https://x.com/ramenhost/status/1819327214275776918/photo/1
Last year, I decided to contribute to tools that I use and fix issues as they arose. While most of the patches were minor fixes, it ranged from C to Rust, from Chrome extensions to React Native. It has been a good side quest. https://x.com/ramenhost/status/1819054388037799939/photo/1
November 8, 2024 at 4:20 AM
Last year, I decided to contribute to tools that I use and fix issues as they arose. While most of the patches were minor fixes, it ranged from C to Rust, from Chrome extensions to React Native. It has been a good side quest. https://x.com/ramenhost/status/1819054388037799939/photo/1
Next steps from MS in response to CrowdStrike incident.
https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/ https://x.com/ramenhost/status/1817765296880636128/photo/1
https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/ https://x.com/ramenhost/status/1817765296880636128/photo/1
November 8, 2024 at 4:20 AM
Next steps from MS in response to CrowdStrike incident.
https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/ https://x.com/ramenhost/status/1817765296880636128/photo/1
https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/ https://x.com/ramenhost/status/1817765296880636128/photo/1
This Jekyll theme is so clean that I instantly decided to switch to it. Check out my blog at https://ramenhost.github.io/
Theme: https://github.com/cotes2020/jekyll-theme-chirpy https://x.com/ramenhost/status/1817109865971782072/photo/1
Theme: https://github.com/cotes2020/jekyll-theme-chirpy https://x.com/ramenhost/status/1817109865971782072/photo/1
November 8, 2024 at 4:20 AM
This Jekyll theme is so clean that I instantly decided to switch to it. Check out my blog at https://ramenhost.github.io/
Theme: https://github.com/cotes2020/jekyll-theme-chirpy https://x.com/ramenhost/status/1817109865971782072/photo/1
Theme: https://github.com/cotes2020/jekyll-theme-chirpy https://x.com/ramenhost/status/1817109865971782072/photo/1
I wonder how many orgs utilized Intel AMT for recovery from CrowdStrike. Intel has published a community post on how to remediate Falcon driver issue with Intel vPro.
https://t.co/nBRhXwnCMg https://t.co/siWXNfMHl5
https://t.co/nBRhXwnCMg https://t.co/siWXNfMHl5
November 8, 2024 at 4:20 AM
I wonder how many orgs utilized Intel AMT for recovery from CrowdStrike. Intel has published a community post on how to remediate Falcon driver issue with Intel vPro.
https://t.co/nBRhXwnCMg https://t.co/siWXNfMHl5
https://t.co/nBRhXwnCMg https://t.co/siWXNfMHl5
CrowdStrike Analysis:
It is clearly NOT a NULL pointer in my minidump file.
It is about time that someone reverse engineers the Channel file format, and we know how csagent.sys ended up with an invalid pointer. https://t.co/pb9QwoIwI2 https://t.co/NV1Cn9ANIu
It is clearly NOT a NULL pointer in my minidump file.
It is about time that someone reverse engineers the Channel file format, and we know how csagent.sys ended up with an invalid pointer. https://t.co/pb9QwoIwI2 https://t.co/NV1Cn9ANIu
November 8, 2024 at 4:20 AM
CrowdStrike Analysis:
It is clearly NOT a NULL pointer in my minidump file.
It is about time that someone reverse engineers the Channel file format, and we know how csagent.sys ended up with an invalid pointer. https://t.co/pb9QwoIwI2 https://t.co/NV1Cn9ANIu
It is clearly NOT a NULL pointer in my minidump file.
It is about time that someone reverse engineers the Channel file format, and we know how csagent.sys ended up with an invalid pointer. https://t.co/pb9QwoIwI2 https://t.co/NV1Cn9ANIu
FWIW, this channel file is NOT faulty and is probably a fixed version. Taken from a system that recovered after a momentary BSOD. https://t.co/FtbPTsINXZ https://x.com/ramenhost/status/1814231028179100107/photo/1
November 8, 2024 at 4:19 AM
FWIW, this channel file is NOT faulty and is probably a fixed version. Taken from a system that recovered after a momentary BSOD. https://t.co/FtbPTsINXZ https://x.com/ramenhost/status/1814231028179100107/photo/1
Remote development is taking off with @zeddotdev! https://x.com/ramenhost/status/1813978513575449078/photo/1
November 8, 2024 at 4:19 AM
Remote development is taking off with @zeddotdev! https://x.com/ramenhost/status/1813978513575449078/photo/1
This sounds so cool!
https://www.siberx.org/escape/ https://x.com/ramenhost/status/1813078249221783670/photo/1
https://www.siberx.org/escape/ https://x.com/ramenhost/status/1813078249221783670/photo/1
November 8, 2024 at 4:19 AM
Zed on WSL2 launches with X11. Unfortunately, Wayland doesn't work. https://x.com/ramenhost/status/1812393110003138712/photo/1
November 8, 2024 at 4:19 AM
Zed on WSL2 launches with X11. Unfortunately, Wayland doesn't work. https://x.com/ramenhost/status/1812393110003138712/photo/1
One liner `p == q` to check if two binary trees are same. Power of rust🦀derived traits.
#rustlang https://x.com/ramenhost/status/1796554709400207469/photo/1
#rustlang https://x.com/ramenhost/status/1796554709400207469/photo/1
November 8, 2024 at 4:18 AM
One liner `p == q` to check if two binary trees are same. Power of rust🦀derived traits.
#rustlang https://x.com/ramenhost/status/1796554709400207469/photo/1
#rustlang https://x.com/ramenhost/status/1796554709400207469/photo/1