🎥 QEMU Dev Starter guide, Part 1
The QEMU codebase can be quite daunting for new developers, Anton with this talk aims to give an overview of both the major APIs one might encounter as well as the high control flow of user-mode emulation.
I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🪲
Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA:
github.com/diversenok/DiaSym…
ALT A screenshot of DiaSymbolView inspecting combase.pdb
Good Morning! Just published a blog post analyzing Hyper-V functionality, design, and key binaries, hvix64.exe (hypervisor), securekernel.exe (secure kernel), and winload.dll (boot-time loader and CPU check).
r0keb.github.io/posts/Hyper-…
We're excited to announce a major new release of x64dbg!
The main new feature is support for bitfields, enums and anonymous types, which allows all types in the Windows SDK to be represented and displayed 🔥
My new article, "Writing a Full Windows ARM64 Debugger for Reverse Engineering," covers the topic in detail, including its internals and the core differences between Windows on Intel and ARM64:
keowu.re/posts/Writing-a-Win…
Had a lot of fun digging into COM stuff with @bohops recently! We ended up finding a way to laterally move without dropping a file.
ibm.com/think/news/fileless-…
I updated PyClassInformer to add several new features such as auto-renaming virtual methods, detecting user-defined classes, detecting possible constructors and destructors, tree-based widget to display class-related information and so on.
github.com/herosi/PyClassInf…
Codecepticon v1.1.0 just released! You can now:
👉Generate certificates and...
👉...sign executables, in order to...
👉...bypass even more AVs with one simple trick!
github.com/Accenture/Codecep…