The first lesson of using #Ghidra's generated VSCode project is that I'm a VSCode n00b :P Lessons so far:

1) You'll need the Extension Pack for Java (from MS, not Oracle's crap!)
2) Ghidra launch configurations are available under the "bug with play button" sidebar icon
+1) Directory/workspace names are not necessarily valid Java package names, but Ghidra generates the code and the fs structure anyway

Now I'm trying to figure out why the sample code is not actually loaded to Ghidra when debugging...

Tech-Fedi

Burp Suite should really just fuck off with it's latest "Would you recommend this product" bullshit!

This supposed to be a professional tool (that users pay for btw) not a fucking marketing platform.

/cc @albinowax

@mumblegrepper

@tmr232 Also

@tmr232 Part of my plan is to run comparative tests, but dealing with the tooling currently feels like this

@skeletor

@cR0w

@krypt3ia

@tychotithonus @stf Inverse example :)

The last couple of days I worked with @tmr232 to bring binaries to his @cfgbot.

Here's my script to export CFG's in DOT and JSON formats from #Ghidra:

https://github.com/v-p-b/ghidra-graph-export

I also exported the latest Microsoft Defender and openssl binaries:

https://github.com/v-p-b/ghidra-function-graph-datasets

... so you can enjoy Absolute Units like:

https://tmr232.github.io/function-graph-overview/render/?graph=https://gist.githubusercontent.com/v-p-b/67d63235089a02888d0bb0159181534a/raw/2799461034b0c0d6fff2051868d56370962965eb/netvm_emulate.json

Like and subscribe:

https://mastodon.social/@cfgbot
https://bsky.app/profile/cfgbot.bsky.social

@th @derPUPE

@dangoodin @tychotithonus Thanks, I tried that, but problem is I'm on Linux that is apparently not compatible with passkeys, so I can't even add a security key.

ghidra-r2web is a project to expose the functionality of #Ghidra to #radare2. After some compatibility fixes I refactored the original Ghidra script into a plugin for better integration and maintainability:

https://github.com/radareorg/ghidra-r2web/tree/master/GhidraR2Web

As I don't have much experience with r2 I can only rely on feature requests to add functionality that makes sense, so please use the issue tracker liberally!

IMO this is also a great opportunity to discuss possible improvements of the r2web protocol to support more integrations.

/cc @pancake

@Sempf

Multiple vulnerabilities in CTFd versions <= 3.7.4 (CVE-2024-11716, CVE-2024-11717)

https://seclists.org/fulldisclosure/2024/Dec/21

Do these count as Cursed CTF tactics?

@gsuberland @mcc OMG I *know* what we will do on NYE!

Circle Drone of Doom progress

OK, this is my summary for today

#Rust

I'm at about third of the 100 #Rust exercises and I think we just got to the "Draw the rest of the fucking owl" part 🖊