@BinaryWizards

Binary Wizards: security, reverse engineering, programming, AI and more.

 USA
youtube.com/@binary-wizards
Joined March 2023
  • Tweets623
  • Following585
  • Followers5.2K
184Media
Binary Wizards retweeted
kernullist
@kernullistJun 28
Started a new blog series on hypervisor based game cheats. The topic is too big for one post, so I am breaking it down piece by piece. Obviously, part 1 kicks off with the basics of hypervisors. - Who owns the execution contract. - What VMX and SVM control state means. - Why VMCS and VMCB matter. - Why a control structure sitting in memory does not prove a live hypervisor by itself. Please take it as a light read. 😇 kernullist.github.io/kernull…

About Hypervisor Cheats, Part 1: Ring -1, VMX/SVM, and Control-State Ownership

Hypervisor cheats are not magic Ring -1 stories. They are about who controls the CPU while Windows is running as a guest. This opening post keeps that idea concrete: which state did the processor...

kernullist.github.io
2
45
207
13,145
Binary Wizards retweeted
Maurice Heumann@momo5502Jun 27
KVM support is making a lot of progress. MW3 now fully runs on SteamDeck. Without Wine, without Proton. Only using sogen.dev. This completely sandboxes the game and provides full security. Performance still needs a lot of work, but it's a smooth start
Maurice Heumann@momo5502Jun 26
Sogen now has KVM support. That allows running games at near native speed on Linux, while being completely isolated from the host system. It's still a bit buggy, but making progress :D
14
31
2
511
38,822
Binary Wizards retweeted
th0rgal
@thomasmcJun 24
Just reverse engineered my Oura Ring 5 so I can control my computer like a wizzard. @ouraring please send my love to whoever buried a feature to stream live accelerometer data
303
506
133
11,215
1,192,292
Binary Wizards retweeted
kernullist
@kernullistJun 22
Huge respect to api monitor. It's such a beautiful tool for windows apps but hasn't been updated for ages. wanted to keep that spirit alive so built a fresh one. Currently tracking 30k apis. very early alpha so expect some bugs.☺️ would love your feedback and bug reports. repo: github.com/kernullist/KnWin3…
1
24
115
5,694
Binary Wizards retweeted
Maurice Heumann@momo5502Jun 13
sogen.dev

Sogen

A high-performance Windows user space emulator.

sogen.dev
5
71
7,140
Binary Wizards retweeted
hasherezade
@hasherezadeJun 6
Now the Linux build is also available as AppImage:
hasherezade
@hasherezadeJun 6
New release: #PEbear 0.7.2: github.com/hasherezade/pe-be… - with important bugfixes and new features:
2
5
64
10,572
Binary Wizards retweeted
eversinc33 🤍🔪@eversinc33May 31
Spent the last 2 weeks working on a devirtualizer for VMProtect 3.5 and learning Remill. Idk yet if I will blog about it, but I at least wanted to publish the code: github.com/eversinc33/MogVMP The approach is different from my last blog, as it lifts the whole x86 code of the VM

GitHub - eversinc33/MogVMP: Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to...

Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization. - eversinc33/MogVMP

github.com
17
93
1
404
20,124
Binary Wizards retweeted
Yibo Liu@34r7hm4nMay 20
Rust reverse engineering is about to get a lot easier. 🦀 I'm thrilled to announce that Oxidizer, the first Rust decompiler, has been officially merged into angr! Try it out: github.com/angr/angr You can also find the paper here: github.com/sefcom/oxidizer/b…

GitHub - angr/angr: A powerful and user-friendly binary analysis platform!

A powerful and user-friendly binary analysis platform! - angr/angr

github.com
22
119
7
796
71,487
Binary Wizards retweeted
Stephen Sims
@Steph3nSimsMay 7
The stream below with @allthingsida is tomorrow (Friday) at 11AM PT!
Stephen Sims
@Steph3nSimsApr 30
Join us next Friday, May 8th at 11AM with Elias Bachaalany (@allthingsida) for the next @offby1security stream on, "Automated Reverse Engineering with LibGhidra, GhidraSQL, and AI Agents! youtube.com/watch?v=9avSjDHK…
9
23
3,585
Binary Wizards retweeted
eversinc33 🤍🔪@eversinc33Apr 29
Made a little experiment of lifting IDA microcode to z3 to automatically resolve opaque predicates. It works quite well on a few malware families I tested on. In the gif you can see Lumma stealer's opaque predicates being solved automatically:
1
25
1
196
12,245
Binary Wizards retweeted
Maurice Heumann@momo5502Feb 23
I started working on a small side project: github.com/momo5502/levo It's an ahead-of-time binary translation toolchain. It transpiles windows binaries to any other OS/platform. It is super limited right now, but managed to translate a 32 bit windows binary to x86_64 linux 🥳
8
16
152
8,959
Binary Wizards retweeted
Alexandre Borges
@ale_sp_brazilFeb 9
This presentation remains the go-to reference for learning the inner workings of the IDA Pro Hex-Rays decompiler: (video) youtube.com/watch?v=T-YkhNEl… (article) i.blackhat.com/us-18/Thu-Aug… #decompiler #reverseengineer #informationsecurity #cybersecurity
94
2
436
17,813
Binary Wizards retweeted
Stephen Sims
@Steph3nSimsJan 26
Join me on February 6th at 11AM PT with the amazing @allthingsida for an @offby1security stream on "Tooling for AI Agents!" youtube.com/watch?v=5iX-06EC…
2
12
37
3,276
Binary Wizards retweeted
babush@pmontesel22 Dec 2025
github.com/thebabush/llvm-ju…
1
6
2
33
7,350
Binary Wizards retweeted
near
@nearcyanJan 16
Announcing vibecraft.sh - manage claude code in style! New: • Spatial Audio. Claude behind you? Claude on your left? No claublem! • Animations: What's Claude up to? Watch him! ◕ ‿ ◕ Vibecraft uses your own local CC instances - no files or prompts are shared.
near
@nearcyanJan 15
this is how i claude code now. it's fun!
88
100
36
1,480
475,127
Finally bit the bullet and spent some time refactoring Remill's build system. It got merged and you can now use Remill with LLVM 15-21 on Windows, Linux and macos 🔥 Using Remill in your projects has always been challenging in the past and I also published a small template you can fork to play around.
2
13
82
8,052
Binary Wizards retweeted
Hex-Rays SA
@HexRaysSA17 Nov 2025
⌨️ Introducing HCLI: The Modern Command-Line Interface for IDA. Automate workflows, simplify plugin development across platforms, manage licenses and more. hex-rays.com/blog/introducin…
47
6
128
29,651
As a little follow up, I wrote a small blog post/tutorial on how to reverse engineer windows drivers with IDA - this is aimed at people that newer touched drivers before and covers IOCTL codes, IRPs and some IDA shenanigans with unions. eversinc33.com/posts/driver-… Enjoy :3
4
130
2
531
35,557
Binary Wizards retweeted
Tavis Ormandy
@taviso5 Mar 2025
You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/5…

Blog: Zen and the Art of Microcode Hacking

This blog post covers the full details of EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.

bughunters.google.com
42
523
36
1,742
185,443
Binary Wizards retweeted
RE//verse
@REverseConf14 Jul 2025
Ticket sales are live! You can sign up for all trainings and conference tickets now. Our round 1 tickets are even cheaper than last year, but the price will be going up for round 2 and 3. re-verse.io/

RE//verse - Reverse Engineering Conference

RE//verse is a premier reverse engineering, vulnerability research, and malware analysis conference. More info on the next event coming soon.

re-verse.io
1
16
29
9,293
Load more