expy

[expy @expend20]

Ported Polaris-Obfuscator from C++/LLVM 16 to Python on LLVM 21.
9 passes: encrypted flattening, modular-arithmetic predicates, pointer mazes, function merging, and an X86 MIR pass that makes IDA's decompiler hallucinate variables that never existed.
https://t.co/eaQSD0ppKp

[expy @expend20]

Shifting Codes — open-source LLVM obfuscation passes ported from Pluto/Polaris/riscy-business to Python via llvm-nanobind. 17 passes, PyQt6 UI, works with modern LLVM 21.

Blog post walking through Pluto obfuscations: https://t.co/BZWUrNopYD

GitHub: https://t.co/BhHd1G5xV5

[expy @expend20]

@pentest_swissky @kmkz_security @two06 Great reading! Just curious what would you do if disassembly or just symbols would be several dozens of megabytes?

[expy @expend20]

@ifsecure are there any info about Big Sleep itself?

[expy @expend20]

@waleedassar was this causing a BSOD?

[expy @expend20]

@Razvieu a weekend project, will release it in a couple of weeks I guess

[expy @expend20]

which feature of a debugger (or RE tool based on it) you were always missing in WinDBG/x64dbg or CheatEngine?

[expy @expend20]

@CyberGhost13337 on x64 I think it's generally unavailable information, first 4 parameters are passed via registers, so as soon as you enter the function, optimizing compiler will do it's thing and then, in the middle of the function, you no longer have access to parameters

[expy @expend20]

@mrexodia @x64dbg just curiuos is arm64 support planned?

[expy @expend20]

@21verses @krishna_2803 @PTRACE_TRACEME @cystariitm hi! great stuff, are you okay if I incorporate some/all of your passes into https://t.co/dB8Wj4ReqE?

[Duncan Ogilvie 🍍 @mrexodia]

Also made a quick video on how to install TitanHide in Windows Sandbox using the SandboxBootkit project. It takes about 3 minutes end-to-end.

[expy @expend20]

@spaceraccoonsec @nostarch just noticed a small error in ch1 about buffer overflow, my gcc on ubuntu shows "stack smashing detected" even without "-fstack-protector", to replicate intended behavior one would need to add "-fno-stack-protector"

[expy @expend20]

Using LLMs to play Flare-On 11.
Much more fun compared to pre-LLMs era.
https://t.co/ZCuQNHYsh9

[expy @expend20]

@x64dbg out of curiosity: what are the factors influencing that decision?

[expy @expend20]

@levelsio

[expy @expend20]

BinaryShield a bin2bin x86-64 code virtualizer crackme solution
https://t.co/A2VFaMQsnc

[expy @expend20]

@sarperavci Great project! If I may ask: where did you get data - parsed ctftime write-up section?

[expy @expend20]

Solving easy 'Hack This Game' challenge using Cheat Engine
https://t.co/rIkcYGL3L3

[expy @expend20]

@spaceraccoonsec @nostarch Is the highlighted red content written or not written yet?

[expy @expend20]

@exploitsclub @ssnossnossno @lemire @L0Psec @ProjectZeroBugs just curious, are you making the summaries in AI? :)