
DFIR/Security Engineer | @venatoraurum | @blueteamvillage | secure all the things
Cyberdelia
Joined September 2025
- Tweets772
- Following421
- Followers279
- Likes1.3K
Pinned Tweet
I support this message
Replying to @glitchDFIR @badt4ste @threathuntergrl @JackRhysider @Jhaddix @tleemcjr @SpudSecurity @Cthulhu_Answers @_colonel_panic @TracketPacer @dasgrog @_ChezDaniela @Skittishandbus @Bandrel @MalwareJake @SecureThisNow
If you're into malware analysis, Windows internals or reverse engineering, bookmark this.
@eversinc33 has built an excellent FREE archive of low-level security research covering:
- Windows kernel internals
- Driver reverse engineering
- VMProtect unpacking
- IDA + WinDbg
- LLVM-based devirtualization
- Symbolic execution
- Rootkits + anti-rootkit research
- Manual driver mapping + BYOVD
- PspCidTable manipulation
- Hidden kernel threads
- .data pointer hijacking
- Kernel keylogging
- Windows access tokens + Potato exploits
- Syscall trampolines
- .NET obfuscation + deobfuscation
- GPU malware + OpenCL
- Node.js malware tracing
- Anti-cheat driver reversing
- Prompt malware + agentic AI security
- YARA-like detection for malicious prompts
Some particularly good rabbit holes include reversing and unpacking a VMProtect-protected anti-cheat kernel driver, building an LLVM devirtualizer, a 3-part anti-anti-rootkit series, GPU-based malware research and the newer NLIR work for hunting malicious prompts.
A lot of it includes real code, IDA/WinDbg reversing and PoCs rather than just high-level theory.
Start digging:
eversinc33.com/
Huge credit to @eversinc33 for keeping all of this research publicly available.
#WindowsInternals #ReverseEngineering #MalwareAnalysis
glitch retweeted
WE WANT TECHNICAL STUFF!
Exploit development. Reverse engineering. Hardware hacking. Detection engineering. Malware analysis. Cloud security. OSINT. Weird protocols. Weird bugs. Weird research.
Submit that goodness to our CFP! Open until October 16th:
cactuscon.com/cfp
glitch retweeted
The Spacecraft Hacker's Handbook published by No Starch Press and written by Andrzej Olchawa and Milenko Starcik is ambitious, practical, and deeply rewarding. It takes you from knowing almost nothing about space missions to having intelligent conversations about their architecture and enough methodology to conduct your own security research.
I came in with no real understanding of how spacecraft, ground stations, mission control systems, or satellite terminals worked. I finished the book with a working mental model of those systems and a clear sense of where I could keep learning on my own.
That is a significant achievement in a 344-page book. The authors compress what feels like an entire introductory course into an information-dense technical survey without getting stuck in the mathematics of signals or orbital mechanics. The most useful lesson is how many boundaries exist across a space system, and how those boundaries interact. Ground stations, mission control software, flight software, communications protocols, user terminals, and navigation receivers each create opportunities for research. The only thing likely to slow some readers down is also one of the book's biggest strengths: it covers a broad range of concepts in a relatively small page count, which makes the reading technically dense. That compression is part of why it works.
An 8.5/10 feels right for this fantastic introduction to space security. What keeps it from a perfect score is largely the same thing that makes it worth reading. So many concepts in 344 pages that the book stays technically dense and may put off readers looking for a lighter introduction. More than once I photographed a dense page and passed it to ChatGPT to explain every abbreviation before I could move on.
Check at the full review on my website:
jacobkrell.com/writeups/book…
So my dog has a tendency to make the tv remote his own personal chew toy. Caught him just in time before he could do irreparable damage but noticed the volume up button was turning the volume down. Decided to open it up & saw the piece to control the volume up was broken off 1/2
glitch retweeted
Let’s see those badge collections folks!
Super happy with my little #defcon #badgelife collection including @defcon official badges and @dcgothcon ones. I love planning and working on things with my GothCon crew.
My first Unit42 blog 🥳🥳🥳
Aeternum botnet leverages smart contracts on the Polygon blockchain to store and retrieve C2 instructions. Querying public RPC endpoints allows infected endpoints to execute immutable commands and evade takedowns. Read our full analysis: bit.ly/45pDx6D
glitch retweeted
Update your oui spy! There is a dev branch that adds pcap capture and research mode.
Colonelpanic.tech


































