Top all-time · #11484
Hexacorn
Personal blog · hexacorn.com/blogsecuritysystems
Hexacorn is a personal blog at hexacorn.com about security and systems. Since 2014, 7 different Hacker News readers have linked it 7 times. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Hexacorn for its malware persistence and autostart research, including the 'Beyond good ol' Run key' series, and for zydisinfo, a tool for visualizing x86-64 instruction encoding.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
EPL (Easy Programming Language, EYuYan, 易语言) is a Chinese programming language. https://en.wikipedia.org/wiki/Easy_Programming_Language is a terse page explaining it but I guess any actual document would be in Chinese. From my understanding this language is very popular in amount people writing game cheating tools and other malware. https://manalyzer.org/report/03b2253bcbb611502eba5b43df3e1dc... is one such example.…
Comment linking /blog/2019/02/13/pe-files-and-the-easy-programming-language-epl/
on “Latino Programming Language”Submitted PROPagate – a new code injection trick – 64-bit and 32-bit as a story · 2 points
HN discussionYou can visualize how instructions are encoded with zydisinfo. Pass in your architecture and the hex bytes of the instructions and it’ll show all relevant info https://github.com/zyantific/zydis/tree/master https://www.hexacorn.com/blog/2023/09/27/zydisinfo-the-disas...
Comment linking /blog/2023/09/27/zydisinfo-the-disassembler-that-breaks-the-code-twice/
on “Exploring x86-64 Instruction Encoding”Submitted Uvwatauavawh – Meet the Pushy String (2013) as a story · 1 points
HN discussionFor more information on this topic check out Hexacorn's "Beyond good ol’ Run key" series. http://www.hexacorn.com/blog/category/autostart-persistence/
Comment linking /blog/category/autostart-persistence/
on “Many ways of malware persistence”Submitted PROPagate – a new code injection trick as a story · 1 points
HN discussionSubmitted Hexacorn – Beyond good ol’ Run key, Part 12 as a story · 1 points
HN discussion