mishap

[kernullist @kernullist]

Released PseudoForge 0.1.0.

An IDA Pro / Hex-Rays plugin built for Windows kernel driver analysis.
It cleans up raw decompiler output with rule-based passes, WDK-backed API profiles, user-defined rules, and optional LLM rename assist that is kept behind deterministic validation.

Current focus:
- DriverEntry reconstruction hints
- IRP / IOCTL dispatcher cleanup
- CTL_CODE and NTSTATUS decoding
- WDK API argument semantics
- pool tag recovery
- LIST_ENTRY traversal
- CONTAINING_RECORD patterns
- callback registration flows
- common kernel cleanup paths

This is still a very early release, so expect rough edges. 😆
repo: https://t.co/BZJfKNfcGX

[Jiří Vinopal @vinopaljiri]

Let's Zoom-In to the new start of the week... 🔍
Releasing #IDA Plugin #ZoomAllViews — Ctrl+Scroll font zoom for every IDA view. 💪
Because this should work out of the box. Now it does. 🤓

• Zoom in/out in Disassembly, Pseudocode, Hex View, Strings, Imports, Functions, Structures, and every chooser 😲
• Works across Normal & Debug view widgets — Stack, Registers, Locals, Watch
• Row heights scale automatically with font size
• Graph/Proximity/Xref views excluded — IDA's native zoom untouched ☝️
• Toggle on/off via menu or Ctrl-Shift-Z
• Single file, zero dependencies 🫰
• Compatible IDA 8.x — 9.3+ (PyQt5 / PySide6) 🛠️

https://t.co/9ZGAhvqi2s

#IDAPro #ReverseEngineering #IDAPython #Malware #DFIR @HexRaysSA

[mishap @oopsmishap]

@Salsa12__ Nice DoS primitive

[mishap @oopsmishap]

@lauriewired Internet do be doing internet things

[m0n1 @m0n1x90]

Built WinGraph, my new project - a BloodHound-style dependency visualizer for every binary in Windows System32 directory.

4,000+ DLLs, EXEs. Every import. Every export. One interactive graph.

Check it out now : https://t.co/sRtf2Lnmqn

[LaurieWired @lauriewired]

My keynote at RE//Verse went great!

(it will be released online later if you missed it!)

[mishap @oopsmishap]

@greglesnewich

[mishap @oopsmishap]

@vxunderground

[Duncan Ogilvie 🍍 @mrexodia]

Thanks to @snowyuwa we will soon have much more comprehensive type support. He was a massive help in testing the new CMake setup ♥

More updates soon!

[mishap @oopsmishap]

@usetraceix You made speakeasy? That's crazy, how come you are not on the contributor list?? They did you dirty!

[Hex-Rays SA @HexRaysSA]

👋 Please join us in welcoming @RolfRolles as Hex-Rays’ new Chief Scientist!

Rolf brings decades of RE expertise, with standout work in obfuscation, decompilation, and software protection. At Hex-Rays, he’ll lead research into next-gen decompilation and automated program understanding to keep our tools at the cutting edge.

We’re thrilled to have him on board!

#ReverseEngineering #IDAPro #BinaryAnalysis #Decompilation

[mishap @oopsmishap]

@RolfRolles This is huge! Congrats and I'm really looking forward to seeing the up and coming exciting changes

[Rolf Rolles @RolfRolles]

I haven't been publishing much lately, but not because I haven't been doing research -- in fact, I've done more than ever in the past five years. My ~200KLOC backlog will soon begin trickling out into the IDA/Hex-Rays ecosystem.

[secret club @the_secret_club]

Hypervisors for Memory Introspection and Reverse Engineering by @memn0ps

https://t.co/yVi4yKE9ku

[mishap @oopsmishap]

@allthingsida It's fair use, challenge the strike

[Daax @daaximus]

Unlock forbidden Windows knowledge! 🤫💻
Find the PEB through truly undetected means and pop calculator 💥
The non-golf form will be available below 👇

#redteamtips #windowsinternals #rust

[mishap @oopsmishap]

@mrexodia Where's the #redteamtips

[William R. Messmer @wmessmer]

If you update WinDbg today (1.2504.15001.0), you might notice another icon in the View tab of the ribbon, one called "Parallel Stacks". While incredibly useful in its own right, this isn't just a parallel stacks view. It's the introduction of graph visualization for extensions!

[mishap @oopsmishap]

@lauriewired What a waste of everyone's time and money including framework.