Binary Wizards

Binary Wizards: security, reverse engineering, programming, AI and more.

[Binary Wizards @BinaryWizards]

Friends, @allthingsida was a fun experiment while it lasted.

The account is now parked and links to @BinaryWizards.

The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel:
https://t.co/v51kMGVASA
I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella.

Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.

[Binary Wizards @BinaryWizards]

IDA stuck in an endless script, or on a hung plugin?

"idasql rescue <db>" saves a copy of your unsaved work from another terminal.

The copy goes next to the database and never overwrites an earlier one.

"idasql close <db> --save|--discard" ends an IDA cleanly from outside.

[Binary Wizards @BinaryWizards]

idasql 0.0.20 is out, with IDA 9.5 support.

Your agent now works with every IDA you have open. It finds them, starts the server it needs, and tells you what it changed.

IDA 9.2-9.5 · Windows, Linux, macOS · x64 and ARM64
https://t.co/LtJPhFXrFL

[Binary Wizards @BinaryWizards]

IDA's UI actions are rows in the ui_actions table. Read what's available, and run one with an UPDATE:

UPDATE ui_actions SET args='{"addr":4198704}', run=1 WHERE name='toggle_breakpoint';

In the GUI, every registered IDA action is there too.

[Binary Wizards @BinaryWizards]

How about running IDA for Windows from your browser via Sogen + Unicorn + WebAssembly?

Damn it is slow (for now though) :)

[Elias Bachaalany @eliasbchlny]

IDA via WebAssembly + Sogen (Unicorn backend).

Very slow. Trust me it works, but I don't have the patience to wait 30 minutes for the full UI to load ;) I will post one tomorrow. If IDA did not waste cycles, this would be usable TBH :P

But yeah, you can technically run full IDA (Windows) from your web browser (iPhone, iPad, PC, etc.) with this combo.

IDA or any Windows app for that matter. No rocket science.

@momo5502

[Binary Wizards @BinaryWizards]

Funny that @momo5502 happened to be working on the same thing too! :)

[Elias Bachaalany @eliasbchlny]

Noticing @momo5502 new PR for Sogen https://t.co/5jGMmiX3Y2 , I had a private patch for that but for KVM from a couple weeks ago! :)

IDA + Sogen + Linux/KVM backend

[Binary Wizards @BinaryWizards]

Cool project for AI/vibe reverse engineering .net apps built on top of libxsql and inspired by IDASQL and GhidraSQL by Rakan AlDuwaysan.

Give your AI agent this tool and see it RE smoothly.

https://t.co/oAI3HfwB8i

[Binary Wizards @BinaryWizards]

r2sql is now maintained under @radareorg as r2xsql. I will find time to make a quick introductory video as well!

[Elias Bachaalany @eliasbchlny]

I've been happily and productively collaborating with @radareorg and the team for a while now, and I'm excited to announce that **r2xsql is finally live!**

R2 was already incredibly feature-rich and AI-friendly, but now you can also let your AI agents interact with R2 databases using SQL queries compatible with the xSQL family (like IDASQL, GhidraSQL and Binary Ninja SQL)

https://t.co/WZt5UGVTxs

Huge thanks to @radareorg and the team for this opportunity!

[Binary Wizards @BinaryWizards]

I made a bunch of videos on IDASQL but still I get asked: what’s the difference between it and IDA MCP and that if it does not have the word “MCP” in it then it must be some slop or something ;)

[Elias Bachaalany @eliasbchlny]

Maybe I should put IDASQL and IDA MCP side by side and post the results ;)

13 seconds.

It will help dispel the misconception about IDASQL and show its true power and flexibility.

Some folks, if they don’t see the word “MCP”, they become so dismissive. :(

And hey, if you don’t like IDA, GhidraSQL is equally powerful and we’ll maintained. Just give it to your AI agent and go touch grass. It just works ;)

[Binary Wizards @BinaryWizards]

I would love to catch up on some good old DOS reversing projects these days with IDASQL and AI.

[Elias Bachaalany @eliasbchlny]

Good old days :)

My first debugger...that's how I learned "cracking"

@msuiche

[Binary Wizards @BinaryWizards]

If you still use Windows Explorer, then it is time to use something better, faster and open source!

[Elias Bachaalany @eliasbchlny]

Sally File Manager now has its own website! Stay tuned for more updates.

https://t.co/t9wsRSW4DL

[Binary Wizards @BinaryWizards]

Finally got some time to implement deep links in IDASQL. A few more unrelated bug fixes and features and 0.0.19 will be out.

[Binary Wizards @BinaryWizards]

Under the hood: libghidra 0.0.8 adds program options, transaction history and cancellable analysis jobs to its C++, Python and Rust clients. The ghidrasql agent skills are updated to match.

https://t.co/rTq9Kpucec

[Binary Wizards @BinaryWizards]

ghidrasql 0.0.7 is out: control Ghidra's auto-analysis from SQL.

UPDATE program_options to turn analyzers off, INSERT INTO analysis_passes to re-run analysis, DELETE to cancel it. Or skip slow analyzers at import with --analyzers-off.

https://t.co/z0D4eu7ohH

[Binary Wizards @BinaryWizards]

@reconmtl And a deep dive into GhidraSQL: https://t.co/m95UdKBCUd

[Binary Wizards @BinaryWizards]

The @reconmtl talk "SELECT * FROM binary - Vibe Reverse Engineering with IDA, Ghidra and Binary Ninja" is out.

https://t.co/E2yXHsvY51

[Binary Wizards @BinaryWizards]

@reconmtl But if you want a deep dive, here's a dedicated IDASQL tutorial: https://t.co/0rSxy6Bkl8

[Binary Wizards @BinaryWizards]

@inflearner Great write-up! IDASQL can do a lot more than export function names and sizes. Its multi-database support, xrefs, call graphs, decompiler queries, type recovery, and annotations could handle most of this patch-diffing workflow.

[Binary Wizards @BinaryWizards]

Stop reverse engineering by hand.

New video: I introduce IDASQL, the first tool in the xSQL family. It exposes IDA Pro's database and API as live SQL, so your AI agent can query a binary the way it queries a database.

Headless RE, source recovery, multi-binary queries.

https://t.co/LEB3uvgJ2k

[Binary Wizards @BinaryWizards]

@inflearner Please link me the blog post. Did you mention IDASQL too?