Inlining: the hard parts

https://bernsteinbear.com/blog/inlining-heuristics/

I’m deeply uncomfortable with Microsoft attempting to weaponise their extensive law enforcement contacts to arrest people who post zero days in the products.

It comes after the researcher was kicked off GitHub (owned by Microsoft), Gitlab (a Microsoft partner), after they were doxxed on Twitter and had their MSRC - Microsoft vulnerability reporting portal - account disabled.

https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!

Interested? 🧵👇

after a few years of building, feroxbuster-pro is live!

i always knew it could be better. some early design decisions made things like adaptive scans impossible. feroxbuster-pro is built on feroxfuzz, which was always the foundation i needed to take it further.

highlights:
- semantic javascript analysis (not just regex)
- expanded endpoint extractors
- per-URL discovery provenance
- tiered wordlists
- adapts to live target behavior
- scan diffing

one-time payment for a lifetime license

https://feroxbuster.pro

You can now use paredit to edit rust code

https://github.com/ThatXliner/rust-but-lisp

#lisp #sexp #rust #plt #cs

Hey fellow hackers and CTF players and cybersecurity enthusiasts, wanna participate in a small experiment?

I created a small CTF task designed to be solved with AI and I need to collect as much feedback as possible to determine if the core principles I used to create it are relevant.

For now, a few people I know already solved it but I definitely need more people to test it so I made it public:

https://virtualabs.fr/ctfai/

Try it, solve it, and send feedback! 😁