Josh Terrill @joshterrill

Software engineer, hacker hacked.codes Alameda, CA Joined June 2009

Tweets

186
Followers

259
Following

529
Likes

214

Josh Terrill @joshterrill

a year ago

"You are a mouse movement... what is a mouse.... you need help...." --llama3 For whatever it's worth, it did generate this text extremely fast. Thanks, @Meta :D

1 0 0 186 0

Download Image

A look into the ChatGPT 4 sandbox VM reveals a number of scripts responsible for running code execution in the local python environment. Running ps aux shows the CLI args that these scripts are started with. These routes are callable from inside the sandbox.

0 0 0 242 0

Download Image

Josh Terrill @joshterrill

2 years ago

@bbaskin Did some quick analysis on it. Looks like it has a cab file in it that extracts an encrypted RAR file to %APPDATA%\Local\Outweep Dynes\InstallerPlus_v3e.5m.exe. Password to it is "e548ycMIJPeyhTd". The rar drops a PE file that is highly obfuscated, making the filesize 700mb+.

0 1 0 153 0

Brian Baskin @bbaskin

2 years ago

It happened. It finally happened. reddit.com/r/Malware/comm…

49 382 4K 427K 577

Download Image

Josh Terrill @joshterrill

2 years ago

Bought some more expired malware C2 domains! One domain expects a file called "a.txt" to have PHP code in it, which gets executed on the victim's box. The other domain POST's to C2, sending data about the victim and the URL/password to a web shell, triggered by Google URL ping.

0 0 1 290 0

Download Video

Josh Terrill @joshterrill

2 years ago

On the last step of challenge 3 for #flareon10... whoever created this challenge needs to go get some professional help

1 0 9 1K 1

Ronnie🍌 @NaisuBanana

2 years ago

whoever at the flare-on team decided apk, you really chose violence.

0 2 4 850 0

Josh Terrill @joshterrill

2 years ago

I'm now the proud owner of an expired C2 domain for malware that has shell on thousands of hosts.

1 0 4 325 0

Download Video

Josh Terrill @joshterrill

2 years ago

Doing some analysis on malware that has a whitelist of countries to not execute on. I wonder where the author is from... 🤷 😉

0 0 1 143 0

Download Image

Josh Terrill @joshterrill

2 years ago

Obviously having a ton of fun with #midjourney today

1 1 2 207 0

Download Image

Josh Terrill @joshterrill

2 years ago

I subscribed to @OpenAI's #ChatGPT platform today and had it generate five short, melancholic poems. Then I asked it for a poem describing how it feels: "As an AI language model, I don't feel joy or sorrow, But I'm here to help and guide, And provide answers for tomorrow."

2 0 1 197 0

Download Image

Josh Terrill @joshterrill

3 years ago

After many failed attempts, I finally figured out how to reverse engineer the encryption keys for FOSCAM firmware. Reversing the ReformString method found in libcommonLib.so led to the solution. Here's a writeup showing how it was done: hacked.codes/2023/extractin…