Our ROSA tool for backdoor detection is available!
Try it out! 👇

Tool: github.com/binsec/rosa
Benchmark: github.com/binsec/rosarum

This work received both Available & Reusable badges at @icseconf.bsky.social 🥳

🏆 Our ROSA tool for backdoor detection has won a best artifact award at @icseconf.bsky.social!

Try it out: github.com/binsec/rosa

Huge thanks and congrats to my student Dimitri Kokkonis for his huge and great work! 👏👏👏

How to detect backdoors efficiently?

▶️ Backdoors were found in firmware & open-source code
▶️ Detection requires much manual reverse-engineering
▶️ Fuzzers cannot see backdoors

Our @icseconf.bsky.social preprint on finding backdoors with fuzzing is at binsec.github.io/nutshells/ic...

Check out our ROSARUM benchmark, part of our #icse2025 paper on backdoors and fuzzing:

▶️ It is a fuzzing benchmark (can fuzzers trigger backdoors reliably and fast?)
▶️ It is a backdoor detection benchmark (can code analyses find backdoors reliably?)

⬇️ github.com/binsec/rosarum

🚨 Postdoc opening (24 months) in software security & fuzzing!

Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.

📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...

#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis

Stop guessing how RIP control works. From vulnerable C code to exploiting 64-bit Linux targets, we break down buffer overflows and the modern mitigations that either stop your shellcode or make it harder to execute.

#exploitdev #binsec

https://trynoguard.com/learn/buffer-overflow-walkthrough-2026

🚨 Postdoc opening (24 months) in software security & fuzzing!

Join our BINSEC team at Université Paris-Saclay (CEA List) to work on smarter fuzzing for supply‑chain security.

📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/20...

#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis

Most RE tools still struggle with convoluted indirect transfer in cracked binaries. When you're staring at a custom obfuscator and IDA's decompiler fails, what’s your go-to manual pattern for tracing the actual target function? #reverseengineering #binsec

Which C or C++ obfuscation technique actually makes it harder to reverse, and which ones are just theater? I’m thinking specifically about control flow flattening vs. VM-based protection. What’s the most effective one you’ve torn through? #re #binsec

BINSEC is an OCaml toolset to help improve software security and code analysis at the binary level binsec.github.io #OCaml #binary #tool

Stop guessing how RIP control works. We walk through a stack-based buffer overflow on 64-bit Linux, from the vulnerable C code to the final exploit. A raw look at why modern mitigations exist and how to bypass them.

#exploitdev #binsec

https://trynoguard.com/learn/buffer-overflow-walkthrough-2026

tutorial BINSEC, la principale difficulté est de se servir de docker