Why Custom Attributes in .NET give me Nightmares

0 comments

Lobsters
Microcode inside the Intel 8087 floating-point chip: register exchange

0 comments

Lobsters

Custom attributes in #dotnet give me nightmares.

Read my new blog post to learn why:
👉https://blog.washi.dev/posts/custom-attributes-and-why-they-suck/

#reversing #malware #pe #binary #asmresolver

Let’s add a photo mode to Wolfenstein II: The New Colossus (PC) (2018)

0 comments

Lobsters
Patching my guitar amp's firmware

0 comments

Lobsters
Reverse engineering circuitry in a Spacelab computer from 1980

0 comments

Lobsters
How to open calc.exe from S&Box

0 comments

Lobsters

📝 New blogpost: Leveraging LLMs for malware analysis - CFF deobfuscation

https://fernandodoming.github.io/posts/llm-cff-deobfuscation/

#ai #llm #malware #cff #reversing

Leveraging LLMs for malware analysis - CFF deobfuscation

Motivated by this paper on Control Flow Flattening (CFF) deobfuscation via LLM, I decided to explore the topic with current frontier models. The paper does not provide code but outlines the algorithm for the chain-of-thought methodology. However, the paper feeds the LLM models with LLVM-IR or obfuscated source code. As the authors acknowledge, this approach is unrealistic, since real-world engineering tasks do not have access to this information. For this article, we will only use machine code or decompiled pseudocode generated by the Hex-Rays decompiler.

FDD