tag: reverse-engineering
2026-03-09
Il Malware Si Smaschera
Analisi statica di un Lumma Stealer reale — sezioni PE, entropia, certificato rubato, anti-debug e infrastruttura C2.VMDragonSlayer
Automated multi-engine framework for unpacking, analyzing, and devirtualizing binaries protected by commercial and custom VM-based protectors.VulHunt Community Edition
Vulnerability hunting framework by Binarly's research team, built on top of the BIAS binary analysis system with MCP integration.2026-03-10
"Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter"
Root cause analysis of CVE-2025-43300 — an out-of-bounds write in Apple's ImageIO RawCamera framework exploited in zero-click campaigns. Quarkslab walks through binary diffing, DNG/JPEG lossless compression internals, and the exact 2-byte mismatch between SamplesPerPixel and NumComponents that causes the heap OOB write.2026-03-16
Kong
The world's first agentic reverse engineer.Remote Code Execution in Yamaha Synthesizers via MIDI Files
A security research talk demonstrating how crafted MIDI files can achieve remote code execution on Yamaha synthesizers, exploiting vulnerabilities in the firmware's MIDI parsing logic.2026-03-18
Xbox One Jailbreak Dopo 12 Anni
Dopo ben 12 anni dal lancio, la console Xbox One di Microsoft ha finalmente ricevuto un jailbreak / hack.2026-04-01
Claude Code smontato
Analisi (in italiano) del leak del source map di Claude Code su npm: esposizione di sorgente TypeScript, feature flag non annunciate, buddy system, undercover mode, telemetria non documentata e implicazioni per sicurezza e privacy.2026-04-08
Your RAM Has a 60 Year Old Design Flaw. I Bypassed It.
LaurieWired video about the Tailslayer research project, which uses hedged reads and channel scrambling offsets to reduce p99.99 RAM latency across Intel, AMD, Graviton, DDR4, DDR5, x86, and ARM systems.2026-04-10
HWInfo and CPU-Z both compromised
VX-Underground flags a supply-chain compromise affecting HWInfo and CPU-Z, with trojanized installers, file masquerading, multi-stage in-memory payloads, and C2 infrastructure tied to the campaign.2026-04-13
Reverse-Engineering SynthID
A repository for discovering, detecting, and surgically removing Google’s SynthID watermark through spectral analysis, with code for multi-resolution watermark profiles and bypass experiments.2026-04-23
RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen
Conference talk on Xbox One hacking and reverse engineering techniques.2026-05-04