Every malware analyst and reverse engineer has used x64dbg. Most have no idea what else the creator has been building.
RiscY Business breaks down the practical engineering of building a low-footprint RISC-V virtual machine interpreter for code obfuscation. If you have ever sat in front of a VM-protected sample wondering how the obfuscator was designed, this is the post that answers it. Understanding how these VMs are built is how you learn to tear them apart. Red teamers and implant developers have already been adopting this approach to protect payloads from static analysis, so expect to see more of it in the wild.
Striga lifts x86 to LLVM IR with Python for binary deobfuscation, the same approach used to analyze obfuscation like LummaC2. Bootkitting Windows Sandbox covers UEFI bootkit internals.
TitanHide bypasses anti-debug protections including VMProtect 3.9.4. Dumpulator emulates memory dumps for malware config extraction and unpacking without executing the sample.
He teaches two courses. LLVM IR and Binary Lifting for malware analysts and reverse engineers who need to deobfuscate protected binaries. Payload Obfuscation for Red Teams covering VM-based payload protection, compiling C payloads to RISC-V shellcode, opcode shuffling, instruction encryption, interpreter hardening, and C2 integration.
The attack and the defense. From the same person.
Started reversing in 2009. 100+ open source projects. All free.
https://t.co/eik5o7JF88
https://t.co/dxU1uvAGXv
https://t.co/IhZE9QJWPr
YouTube: https://t.co/124tFru7I7
Blog: https://t.co/0gO1pV7TuH
GitHub: https://t.co/HJV3aU0NbH
Author: @mrexodia
#ReverseEngineering #MalwareAnalysis #InfoSec
> get dm
> "is this malware?"
> look inside
> malicious libre office macro
> looks funny tho
> raw shellcode
> 2,0,1,187,192,168,45,246
> malware tries connecting to IP address
> 192.168.45.246:443
> malware delivered from a live website
these dumb fucks vibe coded a malware payload and had it connect back to a local ip address. are they actually fucking retarded???
Ptdr je viens de lire des pavés de texte de gens qui font des analyses géopolitique et sociologiques sur ce tweet de blague. Non mais sortez prendre l'air mdr
I don't want a "Smart Fridge" that orders milk for me. I want a fridge that lasts 25 years and doesn't have a privacy policy that allows it to share my late-night snacking habits with my health insurance provider.