Search

2 results for “termux”

1. 

   InfiniteRedirects @termux

   2026-10-18

   Something's up with AWS SNS?
   I mean, in my previous workplace I found an SNS topic just bluntly with overly permissions allowing anyone with an AWS account to do literally anything.
   And in my new workplace I have found just the same.
   This require investigation I'm too lazy to do, but sounds like there's an insecure default policy that is deployed here.

   If SNS had a public URL like S3 buckets do, it'd have been an easy job. But recon here is a little bit harder.
   Tho, still, if you discover one it can be devastating.

2. 

   InfiniteRedirects @termux

   2026-10-18

   Am trying out #OpenCode with #REA, and just doing the example tutorial to see that everything is working, and suddenly an electron app opens and I see in his reasoning that he mentioned --no-sandbox.
   While I shoudn't be surprised that this isn't just static analysis, but if I'm gonna use this setup for malware analysis (and not just trying to RE Adoby), then using OpenCode inside a virtual machine is probably better.

   I myself don't always investigate in a VM, but I'm also very careful with what I do and what I don't, so I know it's relatively safe.
   However letting an LLM run over this with no watch, they can probably detinate something, and also tell you that it was expected.

   so, lesson learn (early, lucky me), is to just use OpenCode inside my REMnux VM and roll from there.
   Should be easy.

   #malwareanalysis

   #opencode #rea #malwareanalysis