Dorka Palotay (@pad0rka) header
Dorka Palotay (@pad0rka) profile picture

Dorka Palotay

@pad0rka

Threat researcher @CUJOAI

 Europe
Joined September 2018
  • Tweets24
  • Following197
  • Followers237
3Media
Photo by Dorka Palotay (@pad0rka)Photo by Dorka Palotay (@pad0rka)Photo by Dorka Palotay (@pad0rka)
Golang analysis made easy with Ghidra? The @NSACyber has included Golang support, but the scripts I maintain for @Trellix still provide an edge! With MacOS support, Golang 1.20 support, and some bug fixes: github.com/advanced-threat-r…
GitHub - advanced-threat-research/GhidraScripts: Scripts to run within Ghidra, maintained by the...

GitHub - advanced-threat-research/GhidraScripts: Scripts to run within Ghidra, maintained by the...

Scripts to run within Ghidra, maintained by the Trellix ARC team - advanced-threat-research/GhidraScripts

github.com
2
22
88
10,040
Amazing work by @Libranalysis on Golang binary analysis with Ghidra
Max 'Libra' Kersten (@Libranalysis) profile pictureMax 'Libra' Kersten@Libranalysis6 Jun 2023
Golang malware analysis? With Ghidra? If that peaks your interested, then my most recent @TrellixARC blog will be a blast! My Java-based scripts to feed Gophers to Ghidra, using @pad0rka's work as a basis, are a knowledge base for many: trellix.com/en-us/about/news…
1
199
Dorka Palotay retweeted
CUJO AI (@CUJOAI) profile picture
CUJO AI@CUJOAI10 Aug 2022
Our Senior Threat Researcher @pad0rka at @CujoaiLabs has just published another article on reverse engineering Go binaries with Ghidra. Read it here: cujo.com/reverse-engineering… #golang #go #malware #ghidra #cybersec #cybersecurity #security #CUJOAILabs #CUJOAI
Reverse Engineering Go Binaries with Ghidra, Part 2: Type Extraction, PE Files and Golang Versions

Reverse Engineering Go Binaries with Ghidra, Part 2: Type Extraction, PE Files and Golang Versions

The second part in our series on reverse engineering Go binaries with Ghidra focuses on type extraction, Windows PE files and Go versions.

cujo.com
1
2
4
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs27 Jun 2022
And we have the one and only @pad0rka on stage at @FIRSTdotOrg Check out the latest Ghidra scripts at github.com/getCUJO/ThreatInt… with type support!
Image from CUJO AI Labs (@CujoaiLabs)
3
6
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs13 May 2022
🐒 We are excited to share the news that @zh4ck will present at the @virusbtn conference in September in Prague. Yikes 🍻 Title: Web3 + scams = It's a match! #NFT #scam
Image from CUJO AI Labs (@CujoaiLabs)
2
5
We are excited to give a talk at #botconf2022 with @gyluptak about #sysrv #botnet and #golang reversing with #Ghidra in two hours
Image from Dorka Palotay (@pad0rka)
1
3
18
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs25 Apr 2022
This NFT "Scam as a Service" is a scam. Deep dive into a NFT scam kit, and making some extra profit on the side cujo.com/nft-scam-as-a-servi… #NFT #scam #web3 /cc @campuscodi @zachxbt @coffeebreak_YT @molly0xfff @NFTethics @briankrebs @ErrorZer0invest @NFT_Awareness @cryptoShields
This NFT Scam as a Service Is a Scam

This NFT Scam as a Service Is a Scam

How an NFT wallet drain scam led us to discover the seller of a Scam as a Service product, which they likely use to scam their own clients.

cujo.com
1
7
3
8
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs24 Feb 2022
🤖@Botconf ‘22 preliminary program is out. @pad0rka and @gyluptak from @CujoaiLabs will be there talking about the evolution of the Sysrv botnet and Golang reversing tricks with Ghidra. Register for the early bird ticket while you can🥳 #Botconf2022 #botnet #sysrv #golang #CUJOAI
1
7
Dorka Palotay retweeted
Botconf (@Botconf) profile picture
Botconf@Botconf21 Feb 2022
First batch of confirmed talks and more to come on our 2022 programme: botconf.eu/botconf-2021/botc…
11
1
26
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs24 Sep 2021
🌱Chia farming malware has been actively distributed since June. Even though it is not profitable for the attackers, it can do severe damage to the victims IP: 45[.]140.17.44 #chia #cryptocurrency #malware #iot
Image from CUJO AI Labs (@CujoaiLabs)
Image from CUJO AI Labs (@CujoaiLabs)
Image from CUJO AI Labs (@CujoaiLabs)
1
2
8
Our latest article with @albertzsigovits about the evolution of the #Sysrv #botnet
CUJO AI (@CUJOAI) profile pictureCUJO AI@CUJOAI23 Sep 2021
Read the latest article by @pad0rka who takes a deep dive into the #Sysrv botnet, which first made headlines at the end of December 2020 and has continued to evolve since then: cujo.com/the-sysrv-botnet-an… @CujoaiLabs #threatresearch #botnets #cybersecurity
Image from CUJO AI (@CUJOAI)
3
6
Dorka Palotay retweeted
Virus Bulletin (@virusbtn) profile picture
Virus Bulletin@virusbtn17 Jun 2021
Interested in reverse engineering Golang? At VB2021 #vblocalhost CUJO AI's @albertzsigovits and @pad0rka will talk about reversing Go binaries with Ghidra. For this and much more, register now for free! vblocalhost.com/presentation…
Image from Virus Bulletin (@virusbtn)
9
1
14
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs20 May 2021
If you are interested in a quantum crypto challenge write-up by @pad0rka and @MarcixWasTaken about DEF CON CTF quals qoo-or-ooo and back-to-qoo, we have you covered cujo.com/def-con-quals-ctf-2… #QuantumCryptoToTheMoon 0⃣1⃣🚀🌕
3
1
5
Dorka Palotay retweeted
CUJO AI (@CUJOAI) profile picture
CUJO AI@CUJOAI20 May 2021
Great news! @albertzsigovits and @pad0rka from @CujoaiLabs got accepted to talk about Reversing Go Binaries with Ghidra at the annual @virusbtn conference. Interested in reverse engineering Golang? Mark the date🗓️19:30 - 20:00 UTC Thu 7 Oct 2021: vblocalhost.com/presentation…
Reversing Go binaries with Ghidra - VB2021 localhost

Reversing Go binaries with Ghidra - VB2021 localhost

vblocalhost.com
1
6
2
11
Dorka Palotay retweeted
CUJO AI (@CUJOAI) profile picture
CUJO AI@CUJOAI8 Oct 2020
Lastest study from @CujoaiLabs and @pad0rka: Reverse engineering Go binaries with Ghidra. Read it here: cujo.com/reverse-engineering… #CyberSecurity #CUJOAI #golang #malware #security
Reversing Go Binaries with Ghidra. Research by Dorka Palotay from the CUJO AI Labs team.

ALT Reversing Go Binaries with Ghidra. Research by Dorka Palotay from the CUJO AI Labs team.

1
24
2
26
Dorka Palotay retweeted
Hacktivity (@hacktivityconf) profile picture
Hacktivity@hacktivityconf28 Sep 2020
At #HACKTIVITY2020 ONLINE CONFERENCE, @pad0rka & @albertzsigovits will talk about Reversing Golang Binaries with Ghidra. Make sure to get your ticket on time to enjoy the presentations and workshop sessions from everywhere around the world! bit.ly/3hzC0iY
Image from Hacktivity (@hacktivityconf)
5
9
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs1 Sep 2020
We are excited that our threat researchers @albertzsigovits and @pad0rka will present 🥁🥁🥁 "Reversing Golang Binaries with Ghidra 🐲" at @hacktivityconf \o/ 8th October, save the date! Battle of a Gopher vs a Dragon, who will win?
Image from CUJO AI Labs (@CujoaiLabs)
8
1
16
Our solutions for @FIRSTdotOrg #CTF 2020 are available: cujo.com/first-seclounge-ctf… @CujoaiLabs🏆
Image from Dorka Palotay (@pad0rka)
3
6
Dorka Palotay retweeted
CUJO AI Labs (@CujoaiLabs) profile picture
CUJO AI Labs@CujoaiLabs5 Aug 2020
🗡️ Time to be offensive. The Attacker Challenge of the ML Security Evasion Competition starts NOW at @DEFCON #SafeMode and will end with glory & prizes on Sep 18 - check mlsec.io/ for more info. 1/2
1
10
1
10
Our team (Last 4of Us) won this year the CTF organised by @FIRSTdotOrg
 Best teammates ever: @albertzsigovits, Filip Savin and @zh4ck First month at @CUJOAI, first CTF, first CTF won, first tweet 🙂
Image from Dorka Palotay (@pad0rka)
2
5
1
12
Load more