| Website | https://iago.gal |
| PGP | https://keys.openpgp.org/vks/v1/by-fingerprint/C865DD53943C3BC6F197CB5568A00BCD06101039 |
2024 was crazy:
- Married.
- First public talks.
- New work adventure.
- Bought an apartment (and an arcade cabinet!!!)
- Changed my car.
- Co-founded a company.
Three wishes for 2025:
- I hope it is a quieter year.
- I hope things keep as good as they are.
- I meant it I hope a quieter year. Really. Please.
[gal] Onte estiveron pola #BlackHat de Londres o noso @DonCaralludo e o noso amigo Marcos dando unha charliña sobre "Análise sintático de malware con Linguado". Menudas lendas!
[en] Yesterday our own @DonCaralludo and our friend Marcos were at #BlackHat London talking about "Syntax analysis for malware detection with Linguado". What a legends!
Boas xente!! Fai tempo estiven trangallando cos keyrings de Linux para extraer tickets de Kerberos con tickey, e recentemente vinme envolto nun novo proxecto no que precisaba volver a aprender sobre o tema, así que vou a describir aquí o proxecto e os conceptos mais relevantes sobre os keyrings por se eu ou outra persoa ten que aprendelos no futuro. O primeiro que temos que saber é que o que se coñece como keyrings de Linux, é un xestor de chaves.
I was playing with code injection to read processes keyrings on Linux. I've wrote a new tool, keydump, and showing how we can use it to extract cleartext credentials from sssd. Not an easy exploitable scenario, but I hope you like the article!!
Hi there!! Time ago I was tinkered with Linux keyrings to extract Kerberos tickets from keys with tickey, and recently I was involved in a new interesting project in which I needed to learn again about this topic, so I will try to describe the important points here in case my future self or anyone else want to learn them. First we need to know is that Linux keyrings is a key management facility.
hackliza
Eloy