Steven Parsons’ Post

Curious about our latest DEF CON badges?    These badges, our second contribution to the badge life community, are not just a wearable tech statement but an experience, developed with passion and skill by our talented Swarm.    Each badge is a testament to our commitment to innovation and the hacker spirit, with over 6 months of planning and production.    If you want to learn more about the rules of this RPG ‘Walking Adventurers’ badge, click the link below and read our latest blog:   #DEFCON #badgelife #cybersecurity #cyber #ethicalhacking

This was really enjoyable module in series of game hacking. Practical, with func final assessment. Good next step after previous Game Hacking Fundamentals, really. In some moment playing with new version of "Hackman" I caught myself thinking "I need to make mod for pause button!". #htb #hackthebox #htbacademy #pentesting #bugbounty #redteam #cybersecurity #gamehacking #modding #reversing

Boosting Performance and Security on ChessDream's Chess Server with Rate Limiting ♟️ Today, I added rate limiting to ChessDream's online chess server to improve both performance and security. I used Rust and some powerful libraries to make sure this solution is both efficient and reliable: std::collections::HashMap: This helps me track IP addresses and how many requests each one makes. std::net::IpAddr: Manages IP addresses, so I can track requests based on where users are connecting from. tokio::sync::Mutex: This ensures that request data is handled safely in a multi-threaded environment, without any race conditions. chrono: I use this to timestamp requests accurately, so I can apply rate limits based on specific time windows. With this setup, each IP address can only make a certain number of requests within a given time frame, which helps prevent abuse and keeps the server running smoothly for all players. ♟️ As ChessDream grows, this is an important step in scaling the platform securely and efficiently! #Rust #RateLimiting #Chess #RustLang #Cybersecurity #ServerOptimization #Tokio #WebDevelopment #Tech

hey #guys completed the day 13 challenge of Advent of Cyber on TryHackMe. so today's task is on websocket. WebSockets let your browser and the server keep a constant line of communication open. it's like open door home where we can continuously communicate without any built-in mechanism of authority and authorization. websocket is used in applications which are mostly used for real time communication and also used in gaming applications. the flaw of the websocket is that an attacker once getting placed in the communication, they manipulate messages, requests and alter them leads to message tampering. also they can create huge traffic over socket and perform DoS as well as gaining extra privileges. I got my car dude 🤣 🐧 #websocket #track #tryhackme #AdventOfCyber #day13

Bad excuses for loosing? Or were your opponents actually hacking you on Mario Kart? 🏎️ A serious vulnerability registered as CVE-2024-45200 has been identified in Mario Kart 8 Deluxe, putting millions of players at risk of remote code execution (RCE) during multiplayer sessions. 📚 The flaw resides in Nintendo's proprietary Pia P2P networking library used for both local and online multiplayer functionality. By manipulating the length of a "browse-reply" packet in LAN play, an attacker could overflow a buffer and thereby execute arbitrary code on the videogame console. 🐞 After disclosing the vulnerability to Nintendo in a bug bounty programme, \@regginator shared a Proof-of-Concept Python script two days ago to demonstrate his finding. 👨🔧 The vulnerability affects all versions of Mario Kart 8 Deluxe up to and including v3.0.1 for the global release and v3.0.2 for the China/Tencent release. Nintendo has now released a patch in v3.0.3 in all regions. ✅ To protect against this exploit, players of Mario Kart 8 Deluxe should ensure their game is updated to the latest version (v3.0.3). Without this patch, consoles remain vulnerable during local multiplayer races. #cybersecurity #mariokart8deluxe -- P.S.: If you discover us through this post, we invite you to follow our content here on LinkedIn, or on YouTube. All the links are in the comments below 👇 P.S. 2: https://lnkd.in/dc7wiPev

In keeping with our 8-bit theme, on Wednesdays we will celebrate #WayBackWednesday. On these days, we will look back into cyber security history at some key moments and memories. We’ll start our journey into the past with “Creeper” and “Reaper”. When you think of “Creeper”, your mind might flash to scenes of Minecraft. And, with “Reaper”, your thoughts may leap to scary movies with figures in dark cloaks. But, that’s not 8-bit cyber history… In 1971, Bob Thomas wrote a computer program called “Creeper”. It moved from one DEC PDP-10 mainframe to another over ARPANET. Later, Ray Thomlinson adjusted the program so that copies of itself remained on each host. When the program ran, it printed to the terminal, “I’M THE CREEPER : CATCH ME IF YOU CAN”. Although the program was a proof of concept and not malicious, it is commonly known as the first computer worm. To clean up the problem, Ray Thomlinson then wrote the “Reaper” program. Reaper searched through ARPANET for infected mainframes and removed the Creeper program. Learn more under: https://lnkd.in/dkvbWECn https://lnkd.in/dKH29B5t #BSidesMunich2024 BSidesMunich 8-Bit :: Forged by HI

🎉 OverTheWire - Bandit Completed! 🎉 After what feels like a million “ssh” attempts and plenty of brain-bending moments (plus a few “why didn’t I think of that earlier?” moments), I’m thrilled to announce that I’ve finally conquered all levels of Bandit from OverTheWire! 🚀 This CTF series is seriously addictive. Who would’ve thought hunting down obscure passwords could be this much fun? It’s a fantastic starting point for anyone diving into cybersecurity, with each level offering a fresh challenge that keeps you hooked. Now that Bandit’s behind me, I’m gearing up for the next set of challenges: Natas, Leviathan, Krypton, and more. But here’s the real dilemma—should I dive straight into Natas, or mix it up with TryHackMe? Decisions, decisions! Let’s see where I land. ⛳ If you’re ready to dive into the world of cybersecurity, OverTheWire is an absolute must. Highly recommend it for anyone looking to challenge themselves, learn new skills, and maybe open more terminal windows than you ever thought possible. #Cybersecurity #CTF #OverTheWire #LevelingUp #PenTesting #InfoSec

🚨 Exciting news! 🚨 I'm thrilled to share the publication of our research paper, "Gaming the system: Tetromino-based covert channel and its impact on mobile security," which I co-authored with Efstratios Vasilellis, Argiro Anagnostopoulou, and Dimitris Gritzalis. This study expands on covert channel attacks, proposing the use of gaming platforms, like the classic Tetris arcade game, as a novel vector for malicious payload delivery. Our methodology diverges from conventional network-based attacks by embedding malicious payloads within the game’s Tetromino pieces. I’d like to express my deepest gratitude to my exceptional co-authors, for their invaluable expertise, guidance, and collaboration throughout this journey. Their vision and dedication were key to making this publication possible. Check it out and think how this might shape the future of mobile security. 🔐📱 #CyberSecurity #MobileSecurity #Research #CovertChannels #InfoSec

🔍 Delve into the world of game hacking : 'Exploring Game Hacking using ll2CppDumper'! 🎮 In this deep dive, I demonstrate the step-by-step process of using jadx for APK analysis, apktool for decompiling, ll2CppDumper for extracting C# classes, dnSpy for class manipulation, and HxD for hex code modification. Our ultimate goal? Bypassing emulator detection to unlock new possibilities in gaming. Join me on this thrilling journey into the intricacies of game hacking! Watch now and level up your hacking skills. #GameHacking #ReverseEngineering #EmulatorBypass #UnityAndroid