Sander Bogaert

Program Analysis - Application Security - LLVM | CTO @Guardsquare

[Guardsquare @Guardsquare]

No permissions. No root. Just pixels.

Pixnapping-style attacks (CVE-2025-48561) can leak what’s displayed by other Android apps. We recreated the attack + tested mitigations devs can apply now —> https://t.co/3oyVT3G3zz

#AndroidDevelopers #SecurityResearch #AppSecurity

[OWASP® Foundation @owasp]

#android and #ios apps that handle sensitive data are a primary focus of reverse engineering and tampering attacks. Hear from #OWASP corporate member @Guardsquare on how to comply with MASVS-RESILIENCE requirements. https://t.co/CFGTlOPvmH #mobileappsecurity @OWASP_MAS

[Guardsquare @Guardsquare]

The Accessibility Service on Android is an impactful feature for people with disabilities. However, it also comes with security risks. Here, you can learn how to protect against them: https://t.co/1EbcSnOUcY
#MobileAppSecurity #Accessibility #CyberSecurity

[Guardsquare @Guardsquare]

In the final blog of our Flutter app reverse engineering series, we look at how classical attacks apply to Flutter apps. Follow along as we investigate using techniques like code patching and hooking for cheating: https://t.co/ksODLAa8qj

#reverseengineering #Flutter #FlutterDev

[Guardsquare @Guardsquare]

The Guardsquare team met in Leuven to celebrate the 20th Anniversary of ProGuard and 10 years of DexGuard protecting #Android applications. See how we're continuing the #ProGuard20 celebrations with the @grdsqrcommunity: https://t.co/SXFRGwKvub

[Vector 35 @vector35]

Introducing Decompiler Explorer. A free decompilation service service funded by @vector35 and @HexRaysSA and jointly developed by @vector35 and @angrdothorse https://t.co/8CQjv1OyCT

[Jeremy Rifkin @JeremyRifkin]

Compiler Explorer @CompileExplore now has an llvm optimization pipeline viewer <https://t.co/665fWdomU9>! Thanks @partouf for the code review and help getting it production ready

[Guardsquare @Guardsquare]

Our latest blog post continues our deep dive into Flutter app security. We explored 3 obstacles holding back decompilation of Dart code, how reverse engineers could overcome them, and future security implications: https://t.co/uS0R8cCtgj

#ReverseEngineering #Flutter #FlutterDev

[Guardsquare @Guardsquare]

Flutter is rapidly gaining popularity as a framework to develop mobile apps. We investigated the current situation of reverse engineering #Flutter apps, the available tooling, and where things are headed in the future: https://t.co/tvXo0iiU9G
#reverseengineering #FlutterDev

[Guardsquare @Guardsquare]

Data flow analysis of Java bytecode has been approached by various tools in different ways. Read our latest post to make sure you don't get lost among DFA tools and to learn about ProGuardCORE’s new DFA feature: https://t.co/f4Nr0YEwzo
#java #jvm

[Trail of Bits @trailofbits]

rellic-xref is our new interactive web interface for Rellic that displays your original LLVM modules and the decompiled C code side-by-side. Try it out and let us know what you think! https://t.co/p4WWt8dUVS

[Yanick Fratantonio (@[email protected]) @reyammer]

This took a long time, huge kudos to @_S0nn1_ for the immense effort and resilience. This paper is about eval and comparing various binary function similarity papers, many of which with a touch of ML; the (re-)implementation will be open sourced, as well as the datasets!

[Sander Bogaert @sanderbogaert]

Nice comparison of binary rewriters by @trailofbits and @GrammaTech in ‘Binary Lifter Evaluation’; https://t.co/qO0aw8xwpf
Would be interesting to benchmark even more of the #LLVM IR based approaches.

[Fabio @degrigis]

In other news, I've recently put together a big state of the art regarding symbolic execution techniques used in system research. Check out the slides here! 1/2 https://t.co/BsQEeTHyxd

[Sander Bogaert @sanderbogaert]

@_dmcyk Thanks for all the amazing ideas and contributions to both our #llvm code base and Guardsquare as a whole! Wish you all the best with the new role 👏

[Sander Bogaert @sanderbogaert]

Yesterday the team released AppSweep!

Mobile app scanning aimed at #AppDev ‘s through intuitive navigation, insightful & actionable findings,… Using #ProGuard static analysis to identify an initial set of common security issues.

Free, so try it out 🚀

#devops #mobilesecurity

[Guardsquare @Guardsquare]

Announcing AppSweep, mobile #appsec scanning for developers.
Scan android apps to identify and address security risks early in the dev process. AppSweep’s security scanning has an intuitive UX and provides actionable, technical feedback.
https://t.co/si39r1Hx8H
#androiddev

[Sander Bogaert @sanderbogaert]

@GriefOfNight Nice to see you keep track of our progress! That one month shouldn’t stop you, feel free to apply, I’m sure we’ll find a solution 👍🏻

[André Jacobs @BitsBecomeBytes]

Looking for #cpp/compiler engineers for our #LLVM team @Guardsquare🇧🇪 to work on LLVM-based #obfuscation. Involves: code transforms/injection, binary instrumentation, anti-cheat etc. Keeping up with the newest RE techniques and code hardening research
https://t.co/tRx0A8BM8L

[Guardsquare @Guardsquare]

With our @Unity3d partnership, we look forward to helping the developer community prevent cheating, piracy, unauthorized modification, player data spoofing and more: https://t.co/Du4mdfa80s

#gamedev #gamedevelopment #unity3d #appsec

[Guardsquare @Guardsquare]

Did you know that LLDB can be used to symbolicate #iOS crash reports?
In our latest blog post we show how it is done, and how using LLDB can help you overcome some of the pitfalls of Xcode’s crash reporting.
https://t.co/WXZUz14XjD

#iosdev #xcode #appledev #appdev