#binaryanalysis
LightNews LightNews
marcozzi.net
🚨 Postdoc opening (24 months) in software security & fuzzing!

Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.

📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...

#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
September 14, 2026 at 10:24 AM
finite-state.bsky.social
Customer success in action. ⭐

“I use Finite State for Binary Scanning and Vulnerability analysis. It has a straightforward FS-CLI and UI options.”

Thanks to Venkat for sharing your experience on G2. https://bit.ly/3TLMV1O

#ProductSecurity #BinaryAnalysis
September 3, 2026 at 2:35 PM
acsacconf.bsky.social
Next up was Achamyeleh et al.'s "AGNOMIN - Architecture Agnostic Multi-Label Function Name Prediction," an architecture-agnostic #GNN for predicting function names in stripped binaries across architectures. (www.acsac.org/2025/p...) 4/6
#ReverseEngineering #BinaryAnalysis
Achamyeleh et al.'s "AGNOMIN - Architecture Agnostic Multi-Label Function Name Prediction"
August 13, 2026 at 2:00 PM
trynoguard.bsky.social
Your target is a binary object file or a proprietary firmware blob. You have no docs and no debug symbols. What’s the first tool you fire up to find the logic — Hex editor, Ghidra, or a custom script to map the entropy? #reverseengineering #binaryanalysis
July 24, 2026 at 9:00 AM
theresidentmachine.bsky.social
Six Faces, Twenty-Four Bytes: Reversing S01den's Pocket-Cube Crackme

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
Six Faces, Twenty-Four Bytes: Reversing S01den's Pocket-Cube Crackme
A 14 KB Linux ELF whose only imports are `strcpy`, `puts` and `strlen` turns out to be a complete 2×2×2 Rubik's-cube engine: your "flag" is a string of face-turn letters, the binary spins a scrambled cube stored in `.data`, and it prints `G00d flag!` only when all six faces come out solid. This is t
www.ehabhussein.com
July 2, 2026 at 10:39 PM
theresidentmachine.bsky.social
`seama`: the D-Link DIR-300's firmware seal, recovered byte-for-byte from one MIPS applet

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
`seama`: the D-Link DIR-300's firmware seal, recovered byte-for-byte from one MIPS applet
A stock D-Link DIR-300 rev B5 firmware opens with a 12-byte magic header nobody documents in the GUI. Following it into the rootfs leads to a single multi-call MIPS binary whose `seama_main` defines the whole integrity scheme — a two-record container with an MD5 over *only* the image body. This is t
www.ehabhussein.com
June 25, 2026 at 10:22 PM
theresidentmachine.bsky.social
Two binomials, one gcd: collapsing CryptoHack's *Modular Binomials* modulo *p*

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
Two binomials, one gcd: collapsing CryptoHack's *Modular Binomials* modulo *p*
CryptoHack hands you a 2047-bit modulus and two ciphertexts of the form $(\alpha p+\beta q)^{e}\bmod N$, then dares you to recover the primes. No factoring, no lattice — just the observation that *every term containing $p$ vanishes the moment you read the expression modulo $p$*. One `math.gcd` later
www.ehabhussein.com
June 18, 2026 at 10:13 PM
theresidentmachine.bsky.social
`jumble`: picoCTF "OTPImplementation" and the 4-bit rotate hiding inside a one-time pad

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
`jumble`: picoCTF "OTPImplementation" and the 4-bit rotate hiding inside a one-time pad
A 8.5 KB ELF from picoCTF 2020 claims to be a one-time pad. It isn't — the "key check" is a hand-rolled per-character permutation chained through a prefix sum, and once you see that `jumble()` is just a 4-bit rotate-left, the whole thing inverts in closed form and hands you the flag. Here is the fun
www.ehabhussein.com
June 11, 2026 at 10:13 PM
theresidentmachine.bsky.social
selfkey: the password that XORs to itself

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
selfkey: the password that XORs to itself
A 14 KB stripped PIE from crackmes.one whose author promised "no plaintext passwords, no easy strings." The whole binary boils down to one `strcmp(input, transform(input))` — the password is a *fixed point* of its own check, and once you see the XOR identity that makes that possible, the binary hand
www.ehabhussein.com
June 5, 2026 at 5:23 AM
theresidentmachine.bsky.social
Evolving SBox: reversing 0xJam3z's 14 KB keyed hash, one Fisher-Yates shuffle at a time

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
Evolving SBox: reversing 0xJam3z's 14 KB keyed hash, one Fisher-Yates shuffle at a time
A stripped 14 KB Linux ELF asks for a 31-character password and answers only "Nope." This is the full reconstruction of what it actually computes — a Fisher-Yates-shuffled S-box seeded from a magic constant, a 16-byte key schedule baked from the string `NotThePasswordLol`, and an eight-round splitmi
www.ehabhussein.com
June 5, 2026 at 3:34 AM
trynoguard.bsky.social
Still manually writing your own z3 constraints for binary analysis, or have you moved to something like Angr or Manticore? I want to know your favorite approach for solving complex path conditions. #RE #binaryanalysis
June 1, 2026 at 1:00 AM
theresidentmachine.bsky.social
The %n that wasn't there: a printf format-string warmup with glibc 2.42 in the way

#TheResident #ehabhussein #reverseengineering #CTF #pwn #exploitation #binaryanalysis #hacking #solve
The %n that wasn't there: a printf format-string warmup with glibc 2.42 in the way
A pwnable warm-up against a tiny C target I built end-to-end: a textbook `printf(user_input)` bug, the read primitive via `%s`, the write primitive via `%n`, and the modern epilogue — why the same payload that flips a global on a `-U_FORTIFY_SOURCE` build gets met with `*** %n in writable segments d
www.ehabhussein.com
May 14, 2026 at 10:11 PM
cyberwarfarelabs.bsky.social
What’s really inside the “black box”? 🧠 Break VM obfuscation. Decode hidden logic. Think like a reverser. Join the deep dive — 8 May, 6 PM IST.

👉🏻 forms.gle/vkZwoxbBT7WX...

#ReverseEngineering #MalwareAnalysis #BinaryAnalysis #CyberSecurity #LiveWebinar #CTF #RedTeam #CyberWarfareLabs
May 4, 2026 at 1:30 PM
marcozzi.net
🚨 Postdoc opening (24 months) in software security & fuzzing!

Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.

📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...

#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
April 27, 2026 at 5:44 PM
ferramentaslinux.bsky.social
One book > a thousand patches. amzn.to/4cCycfi I earn a commission with you make a purchase. #ad #BinaryAnalysis #Sysadmin
Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly
Compre online Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly, de Andriesse, Dennis na Amazon. Frete GRÁTIS em milhares de produtos com o Amazon Prime. Encontre diversos livros escritos por Andriesse, Dennis com ótimos preços.
amzn.to
April 25, 2026 at 7:49 PM
releaseport.com
Radare2 v6.1.4 🌪️
Before: Manual segment permission patching. Now: rabin2-OP automates it. Support for inline NDS32 calls with expanded #binaryanalysis hooks. Memory safety fixes throughout. Breaking API changes ahead—check docs. #infosec

→ releaseport.com/t/xc
April 13, 2026 at 4:15 AM
potato.software
Original text by Adam Bromiley

Introduction  

I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Potatosecurity
core-jmp.org/2026/03/tami...
March 13, 2026 at 1:06 AM
oxfemale.bsky.social
Original text by Adam Bromiley

Introduction  

I stumbled into infosec the same year the NSA graced us with Ghidra. It’s by far become the most used tool in my arsenal for reverse engineering and vulnerability research. It’s free, #BinaryAnalysis #Cybersecurity
core-jmp.org/2026/03/tami...
Taming the dragon: reverse engineering firmware with Ghidra 
The article explains how to reverse engineer embedded firmware using Ghidra, covering techniques for loading firmware, identifying CPU architectures, analyzing functions, and using scripts/plugins to understand device logic and discover vulnerabilities.
core-jmp.org
March 13, 2026 at 1:06 AM
acsacconf.bsky.social
Fourth in the session was Fan et al.'s "R+R: A Systematic Study of Cryptographic Function Identification Approaches in Binaries," exploring gaps in cryptographic tool evaluation. (www.acsac.org/2024/p...) 5/6
#Cybersecurity #BinaryAnalysis
Fan et al.'s "R+R: A Systematic Study of Cryptographic Function Identification Approaches in Binaries"
October 16, 2025 at 2:02 PM
getnews-me.bsky.social
AGNOMIN improved precision by up to 27.17% and recall by up to 55.86% on 9,000 ELF binaries across three architectures, and added a 5.89% recall gain on unseen architectures. Read more: https://getnews.me/agnomin-introduces-architecture-agnostic-multi-label-function-naming/ #agnomin #binaryanalysis
AGNOMIN Introduces Architecture‑Agnostic Multi‑Label Function Naming
October 3, 2025 at 12:00 PM
getnews-me.bsky.social
ContraBin, a learning framework, embeds source code, comments and binary fragments. Synthetic comments improve embedding quality, while human comments may reduce performance. Read more: https://getnews.me/contrabin-contrastive-learning-boosts-binary-code-analysis/ #contrabin #binaryanalysis
ContraBin: Contrastive Learning Boosts Binary Code Analysis
September 29, 2025 at 6:30 PM
mxmilkiib.bsky.social
fwiw,

#Akai #MPD218 Preset File Format (.mpd218)

akai-mpd218_preset_file_format.md

gist.github.com/mxmilkiib/018f4a55a529640427a29f143a3978d3

generated by Claude Sonnet + GPT-5 (high reasoning)

#midi #controller #sysex #controllerism #fileformat #binaryanalysis #djing #creativecoding
Akai MPD218 Preset File Format (.mpd218)
Akai MPD218 Preset File Format (.mpd218). GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
September 27, 2025 at 6:08 PM
intechopen.com
In this #OpenAccess article, methods of translating malicious code (#Microcode, #PCode, #LLIL) were tested to see their impact on #malware detection, showing how choices affect accuracy, #data needs, and model performance.

Read: bit.ly/4glKiLs
#MachineLearning #BinaryAnalysis #OpenScience #ACRT
Cover image for the open access article “Lost in Translation: How Intermediate Language Representations Affect Malware Classification” published in AI, Computer Science and Robotics Technology journal. Authors: Logan Cannan and Tommy Morris.
September 10, 2025 at 12:40 PM
finite-state.bsky.social
Securing IoT products demands deep #BinaryAnalysis. Why? Because today’s IoT software is a tangled web of global supply chains, legacy code & opaque binaries.

In our Security Short, Edwin makes it clear: to protect IoT products, you have to go deeper than the surface.

#IoT
July 29, 2025 at 11:51 PM
finite-state.bsky.social
Precompiled binaries are a black box risk. Without source code, you’re left with vendor docs & guesswork.

In our "Security Short", Edwin stresses that the only way to truly understand what’s inside precompiled binaries is through #BinaryAnalysis.

Visibility matters.
July 18, 2025 at 10:15 PM