Binary Wizards

Friends, @allthingsida was a fun experiment while it lasted. The account is now parked and links to @BinaryWizards. The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel: @binary-wizards" target="_blank" rel="nofollow noopener">youtube.com/@binary-wizards I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella. Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.

@IceSolst @skiffprivacy All trust is gone forever. Who even thought of making this decision in the first place!!!

@milichab @skiffprivacy Yeah opting everyone into uploading everything by default def screams “we care about privacy”

I worked on building an end-to-end encrypted email/docs/files/calendar app @skiffprivacy for 4 years and care deeply about privacy. ZDR and /privacy are always respected in Grok Build - and swapping your setting with /privacy deletes any synced data retoractively

Thanks for your efforts @jeppojeps !

@momo5502 Dude. Always with the cool features!! I like where this is going.

I've been working on Steam passthrough in sogen.dev. Forwarding Steam interaction from the sandbox to the host seems to be working. That means playing actuall MW2 matches in real lobbies is now safely doable in Sogen's sandbox 🥳

@inflearner I get asked this one many times. The best answer is: go try it, follow my video and see for yourself.

@BinaryWizards Great release! How does it differ with the classic Ida mcp?

Stop reverse engineering by hand. New video: I introduce IDASQL, the first tool in the xSQL family. It exposes IDA Pro's database and API as live SQL, so your AI agent can query a binary the way it queries a database. Headless RE, source recovery, multi-binary queries. youtu.be/OSfuKLWMtAA

I would like to add that querying is not just read only. The tooling has full CRUD capabilities. So the AI agents can manipulate the database fully (annotations, type recovery, type application, segments and bytes manipulations, etc. ). Almost all of the IDASDK surface is accessible via the xSQL bindings. The same thing applies to other tooling like Binary Ninja, Ghidra and Radare2 as future videos will show.

(Subscribers count is not important but just for visibility if you have been subscribed to the previous channel please re-subscribe again to this new channel)

Catching up with all threads and now linking the first official video on this tooling: youtu.be/OSfuKLWMtAA

And of course, a bonus simple integration in IDA GUI

Introducing IDA SQL [ github.com/allthingsida/i… ], a tool I have been sleeping on since last summer. It takes a different approach to exposing IDA database and make it extremely friendly to Coding Agents and CLI tools. - AI Agent - Natural language queries with Claude or GitHub Copilot #copilotsdk - SQL Interface - Full SQL access to functions, strings, imports, xrefs, instructions, types - Unified Entity Search - jump_entities() searches everything: functions, types, members, enums (think "Jump Anywhere") - Standalone CLI - Query .i64 files without opening IDA GUI - IDA Plugin - SQL/AI interface inside IDA's command line - Remote Server - Query IDA from external tools, scripts, or coding agents - IDA SQL is built on top of libxsql and libagents

@veeramani656381 @allthingsida @grok here you go: youtu.be/OSfuKLWMtAA

I know a video about how to use idasql and how to configure is due. Meanwhile, some basic stuff it can do: Let Copilot CLI (autopilot mode) + Opus 4.6 | GPT 5.3-codex-high + idasql go after Beep.sys driver, and recover it fully: - The models know about drivers RE - They can nicely follow and recursively deal with dispatch table - Recover the driver object extension type - Systematically go after the whole binary Of course, all of the above are basic scenarios that 'just work' due to how agent harnesses work when given the right tools. idasql is just one tool in your arsenal, it is not magic and with other tools and the right prompting, you can have a more pleasant experience with IDA.

Better late than never. If you have not yet used IDASQL (or the xSQL vibe-re family), then now you can learn how to do so, or how to do it the 'right' way: youtu.be/OSfuKLWMtAA

Get started with the xSQL RE tooling: youtu.be/OSfuKLWMtAA

This photo from the slides is my favorite ;)

Slides are out. Please grab them from here: #select--from-binary---vibe-reversing-across-ida-ghidra-and-binary-ninja--recon-2026-montreal" target="_blank" rel="nofollow noopener">github.com/allthingsida/a…

@pedrib1337 @allthingsida @reconmtl youtu.be/OSfuKLWMtAA

@allthingsida @reconmtl Wish I had attended that talk, thanks for the slides! Which one (IDA, Ghidra, Binja) do you recommend for headless operation by LLM?

PSA: if you are still in @reconmtl and want a hands on (announced last minute)session related to my talk, then bring your laptop and let me walk you through how to use the xSQL family (IDA, BN, Ghidra) to vibe RE. Bring your Claude Code or Codex subscriptions with you. Otherwise just buy 10$ credits from DeepSeek to use with DS Flash or Pro. 10$ goes a lonnng way, and configure it with your favorite harness (Claude Code, Codex, Pi, etc. ). Meet me on Sunday at 1PM in Soprano C or check the updated REcon schedule. I will delete this post later.

Much appreciated. I am happy to see adoption of IDASQL/the xSQL family. Even at REcon, last month, people who attended my last minute workshop were very happy with the performance of this tooling (Ghidra and Binary Ninja included, and operated the same way with your coding agents).

Curious+Honest question: LLMs can just automatically do this kind of recovery. Why bother with a UI and dedicated commands? For instance, IDASQL with CC and Opus, can recover types, IOCTLs, apply them in the decompiler, etc. just natively. One prompt, and zero UI. What’s your goal in your case / plugin? I know many users just want to prompt an agent and get things done and spend less time with UIs.

PseudoForge now helps turn opaque command buffers into readable structures. It traces selector-based handlers across helper calls, recovers C++-style input/output layouts, and shows the field values needed to stay out of error paths. IOCTLs are the first showcase, but the same idea applies to InformationClass APIs, IPC parsers, hypercalls, and other native command handlers. No pdb required. repo: github.com/kernullist/Pse…

libxsql c++ has now been ported to Rust! Happy, responsible and ethical building. github.com/0xeb/libxsql-rs

@therealdreg @radareorg @trufae Yes, thank you for your kind words. I did apologize and he apologized. And now I'm just waiting for them to DM me as they suggested so we can have further discussion. So far I have not heard back.

@BinaryWizards @radareorg I've known @radareorg @trufae since I was ~13 years old, and he's always been a genuinely good person who's constantly doing things for the community. He's never had bad intentions with anything. I'm glad you were able to sort things out💙

My frustrated and angry posts about @radareorg no longer serve any purpose, so I’m deleting them. I believe they acted with good intentions. They expressed goodwill, deleted the repo, and sought a positive resolution. I respect that, and it helps prevent fragmentation of the xSQL tooling family. Besides, what’s the point of holding onto a grudge? For context, r2sql was mentioned during my REcon presentation last Saturday. It has also been in development for much longer than the GitHub history suggests. I typically start with a local repository and only later transition to GitHub after cleaning things up, often resetting the history in the process. I worked on r2sql (still a WIP, although I had to make the repository public prematurely) until the very last minute before my trip to REcon, but I didn’t have enough time to finish it to my satisfaction. @radareorg seems to like the xSQL family, and because of that, if they’re interested, I’d be willing to move r2sql to their GitHub organization for deeper collaboration. I still don’t encourage copying under the guise of “vibe coding” or “being inspired by” while directing an agent to cannibalize another repository. But in this case, @radareorg showed goodwill and genuinely sought to make things right. Come to think of it, @radareorg shares a lot of open source tooling and ultimately has the same goal: serving the security community. I wish them nothing but the best in their efforts, and I hope we can collaborate more in the future.

Started a new blog series on hypervisor based game cheats. The topic is too big for one post, so I am breaking it down piece by piece. Obviously, part 1 kicks off with the basics of hypervisors. - Who owns the execution contract. - What VMX and SVM control state means. - Why VMCS and VMCB matter. - Why a control structure sitting in memory does not prove a live hypervisor by itself. Please take it as a light read. 😇 kernullist.github.io/kernullist-blo…

There is no guarantee that the old handle can be re-purposed, and I don't want to lose it, so I decided to start over with a fresh channel. Subscribers will come, what's more important is passing the knowledge and sharing important information. Do you have any other thoughts? Thanks for the feedback.

@BinaryWizards @allthingsida Can you rename your old channel? If so, that might be a better way to keep your subscribers.

Friends, @allthingsida was a fun experiment while it lasted. The account is now parked and links to @BinaryWizards. The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel: @binary-wizards" target="_blank" rel="nofollow noopener">youtube.com/@binary-wizards I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella. Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.

KVM support is making a lot of progress. MW3 now fully runs on SteamDeck. Without Wine, without Proton. Only using sogen.dev. This completely sandboxes the game and provides full security. Performance still needs a lot of work, but it's a smooth start