I read the binaryaudit post few days ago, and despite #radare2 winning the opensource reversing tools benchmark i was surprised that IDA was faster.. but didnβt really checked how they were running it until now π€¦ββοΈ so here i am once again sharing the same basic tips:
- do not install radare2 from debian, their package was updated 5 years ago π use last release deb files or build from source
- do not use aaaa unless you dont care about time π there are many specific analysis
- pdc is not a decompiler, itβs a pseudodisassembler π use r2dec, decai or r2ghidra instead
DeepWikiβ―Open has been one of my favorite tools for analyzing internal and personal projects and reviewing firmware. It's incredibly useful for generating documentation and understanding codebases.
Recently, it started failing. After some investigation, I discovered that Gemini's embedding API had changed. The old google-generativeai SDK was deprecated.
I spent some time (and tokens ofc) fixing it.
I've forked the project in case anyone else is facing similar issues. Feel free to use it or contribute.
Happy hacking! π§ π₯°
π https://github.com/dan1t0/deepwiki-open
#OpenSource #AI #Gemini #DeepWiki #SoftwareDevelopment #Tooling
PSA: If youβre using @claudeai with Ollama, it can sometimes fail because it tries to call internal βtiersβ (Haiku/Sonnet/Opus), so you may hit βmodel not foundβ depending on the task.
I wrote the fix + a couple tuning tips (and how I disabled telemetry): https://dan1t0.com/2026/01/19/claude-code-with-free-models-ollama-openrouter-setup/
π Another gem silently released within r2-6.0.8 was carefully crafted by @oleavr who tweaked the build system to get an XCFramework ready to be used for iOS and macOS development π
That's compiled in the GitHub CI and ships the most common libraries and plugins of #radare2 to create native apps in #Swift
The SwiftyR2 repository provides an easy, safe and asynchronous API that's based on top of the zero-dependency and self-contained #C libraries of #radare2 (which are also directly available from Swift without the need to create wrappers or bindings).
π Check this out! https://github.com/radareorg/SwiftyR2
βοΈ r2-6.0.8 https://github.com/radareorg/radare2/releases/tag/6.0.8
New blogpost: Using radare2 mcp with r2ghidra as security consultant
After playing with OpenCode and its free models (thank you!), I connected them to @radareorg MCP and r2ghidra to perform automated binary analysis with surprisingly results.
I used OpenCode and its free models wired into radare2 MCP + r2ghidra to run assisted reversing with surprisingly good results. Then I wrapped everything in Docker and added a simple Telegram bot with two agents (security analysis + CTF/crackmes).
Post: https://dan1t0.com/2026/01/02/Using-radare2-mcp-with-r2ghidra-as-security-consultant/
Code: https://github.com/dan1t0/r2mcp-bot
Thank you @pancake for the review :P and your love
#ReverseEngineering #CyberSecurity #AI #Automation #Docker #radare2 #Ghidra #BinaryAnalysis #OpenSource
π£ Just released: GoPhish MCP Server!
β¨ Features:
π― Campaign management (CRUD + analytics)
π₯ Groups, templates, pages, SMTP profiles
π Advanced analytics & reporting
π Smart search & utilities
π¨ New post: "Working With Evilginx On-Premises"
Red-team OPSEC: keep sensitive data on client servers, use cloud only for redirectors.
Cloudflare β Caddy β Evilginx (Tailnet)
β’ Cookie gating blocks scanners
β’ Zero cloud data storage
β’ Full OPSEC checklist
π https://dan1t0.com/2025/09/24/Working-with-Evilginx-on-Premises/
π― Just dropped Webhook Catcher Workers!
π Modern webhook receiver built on
@CloudflareDev
Workers + KV
π¨ Real-time dashboard with search, export & themes
π‘οΈ OPSEC-friendly on-premises deployment
π΄ Perfect for red teams & pen testing
β Star it: https://github.com/dan1t0/webhook-catcher-workers