Mastodawn

xorpse 4d ago

Show thread

pancake

4d ago

@buherator sucks to read their llm based release notes posts. So many mistakes and weird constructions.

Show thread

xorpse Mar 7

Our aim is to build a community and ecosystem around VulHunt to provide a comprehensive toolkit and rule collection that aids researchers and practitioners performing any kind of binary analysis. Give it a try!

Show thread

xorpse Mar 7

VulHunt is the culmination of 4 years of R&D with a goal to scale vulnerability detection in binaries. While the foundation is built on tried and true static analysis techniques, we’ve embraced the AI era and expose VulHunt’s capabilities to agents and tools via MCP and skills.

xorpse Mar 7

We @binarly_io just open-sourced our VulHunt framework at @REverseConf

GitHub: https://github.com/vulhunt-re/vulhunt
Documentation: https://vulhunt.re/docs
Slack: https://join.slack.com/t/vulhunt/shared_invite/zt-3pyjsrqef-xMVFB5C4J6718nPNJAk0Fw

xorpse Feb 20

raptor

Feb 20

Just shipped updates for rhabdomancer, haruspex, and augur. Now compatible with @HexRaysSA IDA 9.3 and @xorpse's idalib-rs 8.0.

These headless #IDA plugins are built for #VulnerabilityResearch workflows where you want IDA's power without the GUI. This release brings a bunch of small improvements and bug fixes.

https://hnsecurity.it/blog/streamlining-vulnerability-research-with-the-idalib-rust-bindings-for-ida-9-2/

HN Security Streamlining Vulnerability Research with the idalib Rust Bindings for IDA 9.2 Tools

HN Security's Technical Director Marco Ivaldi walks through using idalib's Rust bindings with IDA 9.2 to streamline vulnerability research.

HN Security

xorpse Feb 20

I'm pleased to announce a new release of the Rust bindings for @HexRaysSA IDA SDK! This release includes v9.3 compatibility.
Code: https://git.idalib.rs
Docs: https://docs.idalib.rs
Thank you to @yegor who contributed to this release, and to @HexRaysSA for their support.

GitHub - idalib-rs/idalib: Idiomatic Rust bindings for the IDA SDK, enabling the development of standalone analysis tools using IDA v9.x’s idalib

Idiomatic Rust bindings for the IDA SDK, enabling the development of standalone analysis tools using IDA v9.x’s idalib - idalib-rs/idalib

GitHub

xorpse Jan 15

RE//verse Conference Jan 13

Francesco Evangelista will be talking about VulHunt at RE//verse 2026! A new framework for hunting vulnerabilities directly in binaries using structural and semantic patterns with a rule engine and LLM backed triage to spot variants and validate patches across versions and architectures. Don't miss this talk: https://shop.binary.ninja/collections/re-verse-admissions-requires-sales-tax/products/re-verse-2026-admission

Show thread

xorpse Jan 15

@raptor thank you! We’re also planning a blog series around the framework/tooling, which will cover the design, capabilities, how it works, etc. I look forward to see what you think :)

xorpse Jan 11

Richard Hughes Jan 11

What's the most effective thing I can do as a UK citizen to prevent this country from sliding to the right? I'm not a particularly influential, clever or rich person, but I've been watching the US news and am becoming more and more horrified and feel I have to do *something*.

I'm not against just giving labour or the lib dems my hard-earned money so they can campaign effectively. Ideas welcome.

xorpse Oct 24

buherator Oct 24

As a result of working on r4ghidra I set the ambitious goal to create REshare, an exchange format for #ReverseEngineering tools:

https://github.com/v-p-b/reshare/

The code is still in its early days (literally) but the fact that it works with complex, real life binaries tells me that this goal is worth pursuing.

I'm looking for contributors, esp. for #BinaryNinja, #IDA and #radare2 scripting so we can bring all these worlds together!