iiinova — where your digital self keeps evolving

Max

@sttlr.bsky.social

Max @sttlr.bsky.social · 24/07/2026

My first blog post is up: "Pop a Calc: The Crystal Palace Way" Reinventing msfvenom's Pop a Calc shellcode using Crystal Palace and exploring offensive tradecraft vs capability separation. kerekesha.com/blog/pop-a-c...

Max @sttlr.bsky.social · 18/07/2026

For example, when using "run services.spec", I don’t need or use getBSS function - and so it should get optimized with "make +optimize". And it does with the exception of the "Kernel32" string. A rewrite with a stack-string does get fully optimized and doesn’t leave a "Kernel32" string.

getBSS function from services.c with 2 approaches: C-strings and a stack string. Latter gets optimized, while the former leaves a visible "Kernel32" string IOC.

100

Max @sttlr.bsky.social · 18/07/2026

Hi, Raphael @raphaelmudge.bsky.social! I’ve been playing around with Crystal Palace and Tradecraft Garden. I noticed that C-strings don’t get optimized with +optimize. And instead get leftover as a visible IOC.

110