Python (ab)user / Security / Windows internals / @ExaTrack
Joined June 2012
- Tweets473
- Following530
- Followers1.1K
- Likes1.2K
Clement Rouault retweeted
Le programme de BeeRump 2026 est disponible :
rump.beer/2026/category/prog…
N'hésitez pas à vous inscrire, il reste encore des places !
Clement Rouault retweeted
Pour notre première rump acceptée, @angel_killah nous parlera de reverse de jeu d'arcade dans sa rump "A practical example of how arcade games cheat you"
Clement Rouault retweeted
Discover a new linux backdoor hidden for 10 YEARS in a critical HTTP server, waiting for a "magic packet" to wake up.
Undocumented TTP. Full report: blog.exatrack.com/Butoflex%2… #Malware #ThreatHunting #Cybersecurity @ExaTrack @LoginSecurite
Clement Rouault retweeted
🚀 Take your malware analysis skills to the next level with Exalyze
Discover our unique capabilities to compare malware code with our entire database, identifying similar samples and uncovering hidden connections.
👉 exalyze.io
@Exalyze_io
Clement Rouault retweeted
🚨 WARNING: A fake domain—cff-explorer[.]com—has been registered to distribute malware. It currently appears as the top Google result when searching for "CFF Explorer". The only legitimate domain is ntcore.com.
Clement Rouault retweeted
"A calculator app? Anyone could make that."
Not true.
A calculator should show you the result of the mathematical expression you entered. That's much, much harder than it sounds.
What I'm about to tell you is the greatest calculator app development story ever told.
Clement Rouault retweeted
For the first time, our training "Bug Hunting in Hypervisors" is open to the public at @reconmtl !
Designed for security researchers,we will dive into VM escapes, hypervisor attack surfaces, and real-world exploitation.
More info: recon.cx/2025/trainingBugHun…
Clement Rouault retweeted
The second part of my #WinDbg deep-dive into the #Windows #bootloader is up: Get ready for a decades-old registry structure, unique sorting algorithms, and lots of corner cases. The result is a modern Rust replacement for Mark Russinovich's LoadOrder tool: colinfinck.de/posts/nt-load-…
Clement Rouault retweeted
Yes, PDF runs DOOM! th0mas.nl/downloads/doom.pdf
(PDFium only for now)
Clement Rouault retweeted
3+ YEARS of stealth! We uncovered new tactics used by the perfctl malware, including a userland rootkit & an SSH backdoor (a single SPACE in /etc/passwd!). More insights: blog.exatrack.com/Perfctl-us… #cybersecurity #threat_hunting #linux #infosec #perfctl #rootkit #ssh #exatrack
Clement Rouault retweeted
After 6 years, I made a blog thingy again.
This time about MmScrubMemory. An innocuous looking function that has bitten my ass several times in the last several years. And if you're developing a hypervisor, it might've bitten yours, too.
wbenny.github.io/2024-11-21-…
Clement Rouault retweeted
in today's 'no way, is it real?' we found out that Palo Alto's PAN-OS CVE-2024-0012 and CVE-2024-9474 were the equivalents of saying 'turn off auth and give me a shell'.
Enjoy!
labs.watchtowr.com/pots-and-…
