AdvDebug

Security researcher and a CTF Player, sometimes makes github projects or do CTFs.

[AdvDebug @AdvDebug]

Big performance milestone for Brovan! 🎉

KVM backend support is now working, and Linux emulation is much faster.

Next goal: getting a AAA game running. Long term, Brovan could become an alternative to Wine or Proton for Windows and Linux apps without Wine's dirty hacks. :-)

[AdvDebug @AdvDebug]

@IAMMOLESTED @momo5502 A Windows emulator needs real DLLs for it to be as compatible as possible. "close enough" as in wine eventually isn't. Wine is a 30 years of app-specific hacks. I think that he is got a real shot here if he gave it more work. some early TH8 footage doesn't disprove that :/

[AdvDebug @AdvDebug]

Added initial support for GUIs in Brovan, my windows & linux emulator.

Now windows and linux hosts while emulating a PE file can render a Windows GUI. This is a demo of it running in WSL.

Definitely more to work on.

[AdvDebug @AdvDebug]

@momo5502 That's actually really cool, seeing it going from just an emulator for analysis to something that can one day run actual software safely is incredible. Keep going!

[AdvDebug @AdvDebug]

After months of work, I released Brovan, a user-mode binary emulator for PE, ELF, memory dumps, and unknown binaries. Built for reversing, analysis, and full control over execution. Check it out!

https://t.co/NZYsNLpTZL

#reversing #malware #malwareanalysis #csharp #emulator #RE

[AdvDebug @AdvDebug]

@abd0ghazy Bro coughed so hard he overflowed the volume past INT_MAX 😂

[AdvDebug @AdvDebug]

It was a pleasure to contribute as an author and create my reverse engineering challenge "Virtual Mind" for DeadSec CTF 2025. I hope you all enjoyed the event and had a great time solving it! see you in the next one.

[AdvDebug @AdvDebug]

@abd0ghazy @IG_ver3e شايف جمدان من هنا 😂❤️

[AdvDebug @AdvDebug]

Just solved the PicoCTF SaaS (Shellcode As a Service) challenge and made a writeup about it.

i made a medium account so i can cover the topics i wanna talk about. from reverse engineering to exploitation. check it!

https://t.co/TxoZwdqtnQ

#CTF #CyberSecurity #PicoCTF #Hacking

[AdvDebug @AdvDebug]

i made a simple python script for anyone who wants to run vitamin dumps on #vita3k #emulator.

https://t.co/Z1iDwO3a0o

[AdvDebug @AdvDebug]

Check out my #opensource tool "AntiCrack-DotNet" on #github!

It's an advanced tool to detect malicious actions like lookups, injection, debugging, hooks, etc. with reliable and strong detection that works with AOT, and can be built as a client-side AC.

https://t.co/w3oPJFDL0m

[AdvDebug @AdvDebug]

@LiveOverflow @steinerkelvin @alex8x8 yes, most people that make this kind of malware are just script kiddies that copy-paste code and if the browser encrypted the profiles (some give an option to do that but they have an insecure implementation) it will make it more complex and time consuming to get them from memory

[AdvDebug @AdvDebug]

@SecurityJon What kind of backdoor? I think this tweet is misleading, the binaries are open-source and it doesn't even run in the background and it only shows up when you press shift 5 times and you can close it by pressing the close button on the console (it never runs in the background)

[AdvDebug @AdvDebug]

@UnashamedlyB @Tails_live your ISP probably blocked the page, just use any vpn, proxy, or Tor and try again.

[AdvDebug @AdvDebug]

@c3rb3ru5d3d53c it changes the Page Protection of the function DbgUiRemoteBreakin which are an API being called when a debugger uses DebugActiveProcess API, and then probably patch it so that this function can't be actually called (or similar). (Anti-Debugger Attaching)