Rust in your disassemblerAt r2con this year, I am going to present how to solve a CrackMe binary written in Rust. As the conference is online, I chose to record it…Oct 6Oct 6
Linux/Trigona: analysis with r2aiUpdate Aug 26: added reverse engineering of VMWare ESXi featuresAug 25Aug 25
r2ai with lmstudio and gpt-ossBackground: radare2, nickname “r2”, is an awesome open source disassembler. r2ai is an open source plugin for r2 to communicate with an AI.Aug 19Aug 19
Malware W32/SkyAI uses AI? So do I.A new malicious sample, named W32/SkyAI (or Topozuy, or Skynet), has recently emerged, showing use of a AI prompt bypass attempt. Perfect…Jul 4Jul 4
Communication with a Prometei C2 — Part ThreeI am analyzing a Linux Prometei sample of February 2025. In Part One, we found out this sample was packed. In Part Two, we analyzed the…Feb 18Feb 18
Reversing an (unpacked) Prometei binary with r2 and AI — Part TwoThanks to Joan Calvet and Gabriel Hung, we unpacked the Prometei binary of Part One, and now have an ELF…Feb 11Feb 11
Reversing a Prometei botnet binary with r2 and AI (Part One)I’ve just laid my hands on a new malicious sample of February 2, 2025 (1 week ago). It is detected as Linux/Prometei.B. I’m going to…Feb 7Feb 7
Cracking my own CrackMe with r2aiRecently, I viewed the excellent “Cracking binaries with r2ai visual mode” by Daniel Nakov, at r2con 2024. In September 2024, I had tried…Jan 6Jan 6
Creating inefficient IT, or hiding our own inefficiency behind ITWe, humans, normally have brains, and a heart, and we should use them more.Oct 16, 2024Oct 16, 2024
The Next Generation Conference FormatI have now been attending conference for … hum … several decades and I believe the traditional format of 30, 40 or 50-minute talks should…Oct 4, 2024Oct 4, 2024