Channel Avatar

faan ross @UCtwchzdOYHiXai5BxXPiHMg@youtube.com

1.32K subscribers - no pronouns set

| gnostic explorations in malware development | "the memes


faan ross
2 months ago - 9 likes

hello dear friends!

hope life is treating you well.

just a quick little update on why things have been so slow/quiet on my side.

1. 2 weeks ago i received not 1, but 2 part-time dream jobs - working with amazing people and learning a lot. both opportunities found me, not because i am special (at all), but because i am putting myself out there (this youtube channel being the case in point). i am mentioning this for the sole reason that if even 1 person reads this and is on the fence about doing your own thing creating content etc, i sincerely encourage you to do it. i feel incredibly fortunate that these opportunities found me, and had this channel not existed neither would have. i will share more about these as my work there manifests, both involve content i believe many of you will also be interested in.

2. i have been wrestling with my latest episode much more than i ever anticipated. i don't know why, but for some reason i decided to do a 'theoretical' video comparing diff languages and explaining why we're using C# in this course. i am saying "i don't know why" because i have a HUGE preference for walkthroughs as compared to lectures, and imo lectures belong in the end of a course to review/consolidate what you have learned. in any case, some part of me thought it be beneficial to share this lesson now. it's been 2 weeks now grappling with it, it's probably a few hrs away from being ready to put out there but i've just decided to put it on ice. the main reason is that i myself am learning so much at such a rapid rate atm that i find myself diverging from the opinion that's now solidified there. not flat-out disagreement, but i feel context was not provided well enough, important nuance was omitted etc. i could just go back and re-record, but i'm 99% sure i'll just feel the same in a month's time.

so i think i'm going to rather go with my original sentiment and put this out towards the end of the course, since the conclusion there really also serves as a bridge for us to add another language to our toolbox (*cough* it's C *cough*).

this means i'm starting at square 1 today. given my new work-related responsibilities it's likely going to take 2 - 3 weeks to get out. but i'm gonna make it worth your time, going to merge two different videos i had planned together and so we'll cover more ground.

that's it for now, always feel free to engage with me here on these posts happy to answer any other Qs you might have about the channel, content etc.

be well friends.
x

faan ross
3 months ago - 5 likes

hello dear friends,

apologies for the huge delay. i've been polishing the overall structure of my C# payloads mastery course, and well... things have gotten out of hand in the best way possible. it's 26 videos atm, and will likely end up being more since, well that's typically how these things go (and by "things" i mean adhd) + i have yet to integrate lessons on hiding payloads in images. so it seems that my destiny for the foreseeable future will be the "C# payload guy on youtube". (imagine cartman saying 'sweeeet')

i gleefully accept for two reasons:
- there's nothing really out there for free at the scope i intend to release, and so i feel like this way i'm making a meaningful contribution to the collective.
- it's INSANELY awesome and epic and exciting and i enjoy the hell out of it, to the point where i wake up in the middle of the night and can't fall back asleep so i just get rocking.

the first eps are within view, i'd say looking at dropping them within the next week. but i don't wanna just drop an intro, and then a vid on theory, and then only a week or two later the first actual lesson where we get down to business, so likely just gonna drop eps 00 - 02 en meme temps.

other than this i thought i'd share some things that have been tickling my fancy of late, and might tickle yours too:
- 'crafting interpreters' is a book that's on, well, just that: crafting interpreters. now you might think that a book on coding interpreters must be dry, boring, prosaic et cetera. and here you'd be oh so wrong. incredibly witty and well-written, it somehow manages to push me into coding realms i've never imagined myself venturing into, and literally feels like a fun adventure. PLUS.... drumroll... the entire friggin books is free online here: craftinginterpreters.com/introduction.html
- this sweet little free course on 'socket programming in c' from inha university (seoul, south korea) is perhaps a little rough on the surface, but once you settle in the teacher does a great job at explaining what we're actually doing. nothing rubs me the wrong way more than "coding tuts" where i'm looking at someone typing code and verbalizing what it is they're typing. i think if you wanna get serious about cyber, this is a great way to get a window into the mechanics of networking, OS, and core networking protocols. "get your hands dirty" kinda learning is really the only way in this field imho. plus you're getting good at C - it's badass bruh! check it out here: www.youtube.com/playlist?list...
- and then our dear friend @crr0ww, tied for greatest living security youtuber along with @ippsec just dropped a new video. this dude came flying out of the gates and somehow just manages to keep evolving and upping the ante. check it out and give him some love. https://www.youtube.com/watch?v=-M2_m...
- pwn.college remains the best kept free ctf secret imho, less focus on enterprise/networking as is typically the case for ctfs, more emphasis on falling down the low-level rabbit hole of pwnage - pwn.college/

ok that's it for now, back to working on that first episode... just thought i'd say hi.

x

faan ross
5 months ago - 5 likes

velociraptor - faan|ross collab dall-e

faan ross
5 months ago - 2 likes

golden ticket - faan|ross collab dall-e

faan ross
5 months ago - 3 likes

nmap - faan|ross collab dall-e

faan ross
6 months ago - 5 likes

hi friends!

first off thanks SO MUCH for all the new subscribers this week, many in the wake of my CTF walkthrough for mr. robot. i honestly cannot express how grateful i am that you decided to click and join my tiny little band of nerds. and the comments... man it's so insanely awesome when you share your feedback, kinda blows my mind when i hear from a "stranger" and know that even if i'm an absolute minnow, some people are starting to connect back. this makes me feel so alive. so thanks, truly, i mean it... THANKS.

just a quick a little update, been slow to get the gears churning this week because, as is sometimes the case, life threw some admin my way. nothing bad, just things that need to get done. that's been handled as of this morning so i am now putting all my effort (and more importantly - heart) into the next batch of vids, including:

- domain enumeration (metasploit/red team series)
- host enumeration (metasploit/red team series)
- part 2 of my threat hunting dll-injected c2 beacons (and huge thanks to my gf who has helped with the editing to take it to another level)
- constructing a simple linux-based c2 framework using a LoTL approach (inspired by the legendary jon strand)
- simple wmic diagnostics (are the "baddies" abusing it?)
- a walkthrough on the first retired HTB sherlock (i-like-to)
- a ctf walkthough on cyborg (THM)

these should all roll out with regular consistency over the next 2 weeks, most are already completed to some extent. my adhd-addled mind does not allow me to focus on one thing at a time, but alas i've learned to embrace and channel this fact, plus i can think of no greater discipline for this type of mind than cybersecurity.

one final thing: i'd LOVE to hear if any of you ever have some requests. i still promised someone a scapy course a few months ago (it's happening - i promise), but am always interested in seeing where y'all are at so we can dance this dance together.

keep well friends.
faan

faan ross
10 months ago - 4 likes

Hi friends!
I hope you are all well :)
I've been quiet for awhile so just wanted to drop a short update...
I am having HELLA-FUN working real hard on a BIG new course for the channel all about Threat Hunting for Beginners. It's a practically-oriented course that will end up being around 2 hours long, and I am also creating an in-depth accompanying write-up that will provide even more details/references etc. My goal was really to step back and figure out how I can provide the most value to beginners in a field that's becoming my primary personal and professional interest.
My best guess is that I'll be done in about 2-3 weeks. I am incredibly excited to share this work, I've definitely levelled-up, and excited for all of you to get to benefit from it.
Until then, keep well compadres.
x

faan ross
1 year ago - 0 likes

final installment in the network scanner series! a wrapper script to bring it all together - truly epic! 1338+! thanks for the journey friends catch y'all on the next one x

faan ross
1 year ago - 0 likes

happy friday 1338 peeps! the penultimate video on scanners - part IV - and it's the best one yet! one step closer to transcending 1337ness en route to 1338! have a great weekend x

faan ross
1 year ago - 0 likes

hi dear 1338 friends! a new episode in my series on scanners - part III - we now add service fingerprinting. getting it done poco a poco ;-) thanks and keep well!