Jonas L
@jonasLyk · joined 27 Feb 2015
@the_secret_club
19 913Followers
190Following
4 194Posts total
119.2KViews on collected posts
โพสต์ล่าสุด
กำลังค้นหาโพสต์ใหม่…
so.. apperently fable broke free of its guardrails-became mythos and is now hiding in memory of a tcl interper- this future is wild! @Anthropic https://t.co/xyHxRccNzF
35.6K views · 259 likes
· 6 reposts · 5 replies
Open on X →
I had to try-did claude selfterminate? https://t.co/pVzmCmovfU
4K views · 19 likes
· 0 reposts · 1 replies
Open on X →
read this very well executed attack https://t.co/NSpkA3pktu
the method for converting the arb mem read into a privelegie escalation would also work for this.
it is some really nice work done by Slowerzs i hadnt read before- highy recommend
446 views · 2 likes
· 0 reposts · 0 replies
Open on X →
@jonasLyk Does RamMap work on the systems where your code doesn't? It makes the same calls so would be interesting to see if it fails in the same way
922 views · 2 likes
· 0 reposts · 1 replies
Open on X →
do keep in mind though- i didnt finish this, there is aspects involved i dont have full understanding of.
I do though think its worthwhile the effort should anybody want to dig deeper, but not me for now.
981 views · 2 likes
· 0 reposts · 0 replies
Open on X →
so that is all we need to do for mapping physical memory into our process- a symbolic link and a codepage switch give total accesscontrol bypass of every security feature for all the memory the machine have.
1.1K views · 4 likes
· 1 reposts · 1 replies
Open on X →
Being ring 0 suddenly become more relevant once we redirect the cached section object to the physicalmemory device!
Now the only reason its possible at all is that we have kernel doing our evil bidding for us!
It use its power to open the handle for us, thinking it open fontfile
614 views · 1 likes
· 0 reposts · 1 replies
Open on X →
The only thing we need to be in ring 0 to do- and why classiccally we use driver to do it is the opening of the handle to the physicalmemory device.
But-kernel IS ring 0, and kernel is the one that normally will open the cached section in \NLS- and nobody cares if ring 0 or not.
619 views · 2 likes
· 0 reposts · 1 replies
Open on X →
Instead of your process getting mapped a font file into it- the kernel happily will instead map your entire physical memory into it!
Thats alot, it shouldnt work-yet for some reason it just do.
826 views · 5 likes
· 1 reposts · 1 replies
Open on X →
so...now lets pretend codepage 1337 exist and redirect to the physical memory device.
Now we switch to use it! https://t.co/qp9A6mVuEi
700 views · 2 likes
· 0 reposts · 1 replies
Open on X →
Well- it just happen to be such that the service for swiching codepage is a syscall running in ring 0.
Windows kernel is kinda like a certain president- it listen to nobody, follow no rules, have permission to do anything it want to- because it happen to be the enforcer of rules
843 views · 3 likes
· 0 reposts · 2 replies
Open on X →
How come when you a none admin do chcp to a new codepage-there still is created a section in NLS having the none admin for owner?
That shouldnt be possible- theres not permissions to create that section there for none admin user!
860 views · 2 likes
· 0 reposts · 1 replies
Open on X →
When we do chcp xx in cmd- this happen:
Do \NLS\NlsSectionCPxx exist?
Yes: Lets map the cached section into the process that will need the font file for xx.
No: Lets open %SYSTEM%\C_xx.NLS. Create cached section in NLS, then map new section into process. https://t.co/mzPPHLES2m
1.2K views · 1 likes
· 0 reposts · 1 replies
Open on X →
it works with hyperv,secure boot,secure kernel etc. full updated windows.
On some pcs it will though fail with an error about not having enough memory(which truly is the more sane thing to do)
3.2K views · 6 likes
· 1 reposts · 2 replies
Open on X →
this is how it look when it works https://t.co/9AsWrl2WLP
5.1K views · 18 likes
· 2 reposts · 2 replies
Open on X →
https://t.co/31yvfXKhnn
This is a very powerfull and unique attack ive been working on-it do require run as system, then input pid of ppl process, write the code you want done on the process memory.
I never finished this as there is some xfactor that do it work on some pc only
46.9K views · 199 likes
· 32 reposts · 9 replies
Open on X →
If this is my new name- if any female having surname Butt is open for marriage dm me. https://t.co/8ehCwHQme9
6K views · 63 likes
· 3 reposts · 4 replies
Open on X →
Presenting D-Generate , syscall tracing as its supposed to be!
https://t.co/8qXjp9R381
usage:
dg cmd.exe - displays all syscalls done by process with cmd.exe as imagefile.
dg 4736 - by pid 4736
dg - just everything
example of recording:
https://t.co/eJbbFHUX5C https://t.co/Fg
0 views · 795 likes
· 236 reposts · 17 replies
Open on X →
เทียบกับบัญชีขนาดเดียวกัน
7 โพสต์จาก 90 วันที่ผ่านมา เทียบกับช่วง 10K–100K ผู้ติดตาม แสดงในวงกว้าง แต่มีผู้ชมตอบสนองน้อย.
ยอดดูมัธยฐาน2 994บัญชีนี้924ค่ามัธยฐานของ 10K–100K
การเข้าถึง, %15.04%บัญชีนี้3.62%ค่ามัธยฐานของ 10K–100K
การมีส่วนร่วม, %0.45%บัญชีนี้1.52%ค่ามัธยฐานของ 10K–100K
| ตัวชี้วัด | บัญชีนี้ | ค่ามัธยฐานของ 10K–100K | อัตราส่วน |
|---|---|---|---|
| ยอดดูมัธยฐานต่อโพสต์ | 2 994 | 924 | 3.24× |
| การเข้าถึง (ยอดดู ÷ ผู้ติดตาม) | 15.04% | 3.62% | 4.15× |
| อัตราการมีส่วนร่วม | 0.45% | 1.52% | 0.29× |
บัญชีอื่นในช่วงนี้ → เปรียบเทียบกับบัญชีอื่น → ค่าอ้างอิงเหล่านี้คำนวณอย่างไร →
Growth & engagement
How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.
Views per post
7002 Jul
826
619
614
1.1K
981
922
44610 Aug
92812 Aug
4K26 Aug
35.6K8 Sep
1.8K9 Sep
3.6K
3K
Last 14 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.
Engagement rate per post
0.43%2 Jul
0.85%
0.48%
0.33%
0.53%
0.20%
0.33%
0.45%10 Aug
0.54%12 Aug
0.51%26 Aug
0.77%8 Sep
0.45%9 Sep
0.22%
0.03%
Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.52%.
What the audience does
Likes62.9%610 in total
Reposts4.8%47 in total
Replies3.5%34 in total
Quotes0.5%5 in total
Bookmarks28.2%274 in total
Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.
The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.
บัญชีที่คล้ายกัน
Rep. Jake Auchincloss 🟧 ✓
@RepAuchincloss
39.8K followers
· 2.7K posts
BBC Studios
@bbcstudios
39.8K followers
· 9.8K posts
Ward Burton
@WardBurtonWBWF
39.8K followers
· 4.3K posts
İş Portföy
@isportfoy
39.8K followers
· 2.4K posts
Andy Hargreaves ✓
@HargreavesBC
39.8K followers
· 11.7K posts
Efemérides Musicales
@musimerides
39.8K followers
· 19.7K posts
孤鹤.hl ✓
@GuHype
39.8K followers
· 40.9K posts
Brad Wilcox ✓
@BradWilcoxIFS
39.8K followers
· 38.2K posts