Benjamin Funke

Analyzing Software
Working on Detect It Easy / DEV7 / Boozook
My GitHub:

[Hex-Rays SA @HexRaysSA]

IDA 9.5 adds a licensing API.

Everything the License Manager dialog does is now available from code, in the C++ SDK, IDAPython and IDA Domain.

Handy for plugins, headless scripts and shared-license pipelines.
👉 https://t.co/iHcHp0rVWp

[x86rc @x86rc]

Emulation-based unpacker and import resolver for Windows x64 VMProtect 3.x binaries: https://t.co/nFpkH6cqps

[Greg Linares (Laughing Mantis) @Laughing_Mantis]

Fun fact:

Barnaby Jack once decompiled and cracked IDA with itself and uploaded a cracked version of it into a webserver of a coworker.

After it got indexed HexRays found it, and banned our whole company from using it

We even got mentioned in the EULA

[Myria @Myriachan]

IDA Pro is going to fall victim to itself eventually: AI reverse engineering will decompile it like just happened to Photoshop.

[AnMioLink @anylink20240604]

Another WHQL / WHCP-signed rootkit driver, disguises itself as ACE anticheat, implements anti-antirootkit tools, process injection, priviledge escalation, self-deletion (from disk), etc.
Hash: f4991c22b12166193613b5bc96cbde549efa25e26c0fa2c03e40d258232a822e
@nextronresearch

[wearr @_wearr_]

doing some bullshit (windows 10 1502 kernel with windows 7 sp1 userland)

[ISSAC @iss4c_f0ng]

Successfully chained two API calls (VirtualAlloc+memcpy) using ROP... Three feels a bit tough though...

[rA9 @rA9_main]

The future is here. iDevicerestore running on a… PS3.

[PELock @PELock]

@WindowsLatest They can really break anything useful, I'll stick to my TotalCommander

[Aleksander 🇵🇱🇷🇺 @dhulqarnayn786]

🇷🇺 Happy Birthday to President Vladimir Putin! 🎂

He is 74 years old today! 🥂

May God grant him health, strength, and patience 🙏

[Bob Pony @TheBobPony]

Don't have enough RAM for Half-Life 1. 🥀

[REMnux @REMnux]

Updated Detect-It-Easy by @horsicq to the latest version. Get it by running "remnux upgrade" on @REMnux: https://t.co/Ow6rKdymKm

[cr3ghost @cr3ghost]

If you're into low-level security, reverse engineering or exploit development, bookmark this.

Secret Club is one of the best FREE technical security research archives online.

The rabbit hole covers:

- Windows internals + kernel research
- Reverse engineering
- Binary exploitation + RCE
- Hypervisors + Intel VT-x
- EPT + memory introspection
- UEFI + bootkits + rootkits
- Anti-cheat internals
- BattlEye + EasyAntiCheat
- Game exploitation
- VMProtect devirtualization
- LLVM + x86 lifting
- Obfuscation + deobfuscation
- Fuzzing + bug bounty research
- Anti-debugging + anti-analysis
- PE internals
- VirtualBox escapes
- Windows privilege escalation
- BitLocker + TPM research
- macOS security bypasses
- Kernel hooks + graphics internals
- Game engine RCEs
- Cryptography + packet reversing

Some absolute classics in here:

BattlEye reversing + emulation, Windows Sandbox bootkitting, Source Engine RCEs, VMProtect devirtualization, hypervisor-based memory introspection, $200K fuzzing research, Windows 11 TPM research, UEFI internals and x86 -> LLVM lifting.

And the archive is still active.

Start digging:
https://t.co/yMGU3XNzGs

Huge credit to everyone who has contributed research to Secret Club over the years.

#WindowsInternals #ReverseEngineering #ExploitDevelopment

[nisarga @ni5arga]

CVE-2026-85153

critical vuln in a dating app

i can hack a dating app but still can’t get a girlfriend

[Aniimo @Aniimo_EN]

📖 Aniimo Profile Vol. 28: Leafy

Evolved from Pranky, this Grass and Water-Type Heal Aniimo lives a quiet and refined life among the lotus flowers. 🪷

It is beauty, it is grace, it uses a leaf to hide its face! 🪭

#Aniimo

[haro.7z @haro7z]

Porting Debian to my voice recorder

[Dark Web Informer @DarkWebInformer]

Average malware analyst after 14 hours in Ghidra. 🤣

[Russia X 🇷🇺 @Rusia_HD]

History will record that Putin refused to let Russians be subjects and slaves of Europeans, and that he fought for his people and his historical lands.🇷🇺💚

[Erulaz @ErulazGG]

Las nuevas variantes de Eklue se ven interesantes y parece que la de sombra tiene otro nombre
#Aniimo

[Daniel Kos @dwkos]

Imagine if there'd been a Windows 97 that copied the Excel 97 look across the OS?