Lab

@vicnaum @claudeai Made a small related CLI tool that lets you inject custom scripts into the JS runtime. One issue I see though is reidentifying functions across updates. You could probably use semantics for that though. github.com/LabGuy94/claud…

I reverse-engineered @claudeai Code's binary to add a feature I always wanted: When context fills up - instead of nuking everything with /compact - I can now surgically strip tool calls/results and thinking blocks while keeping all actual messages intact.

@frdfzi I never knew I needed this until I saw it

Small functionality, but with a big impact on pseudocode readability. Great IDA plugin! Haha. github.com/libtero/idagui…

@belabs_engineer Nah, TPwSav.sys. It's an already known vulnerable driver, but all the POCs I found were just using the single byte physical mem rw when it exposes ZwMapViewOfSection. loldrivers.io/drivers/c0634e…

@LabGuy94 Gigabyte driver?

Vulnerable driver only returns bottom 32 bits of 64 bit virtual address, ended up brute forcing the top 32 bits

We’re releasing our analysis of ring-1.io, a major game cheat targeted by multiple studios in recent legal actions. We partially deobfuscated several Themida-protected components and document how it hijacks Hyper-V to inject and manipulate game code. back.engineering/blog/04/02/202… github.com/backengineerin…

@kanavtwt For a cool 20 grand

> Opus 4.6 wrote a C compiler from scratch which compiled the Linux kernel successfully and you think it's a bubble???

@allthingsida Damn dude this is awesome. I’ve seen libraries that interface with the idb but they’re always language bound, but this via SQL makes it universal.

Introducing IDA SQL [ github.com/allthingsida/i… ], a tool I have been sleeping on since last summer. It takes a different approach to exposing IDA database and make it extremely friendly to Coding Agents and CLI tools. - AI Agent - Natural language queries with Claude or GitHub Copilot #copilotsdk - SQL Interface - Full SQL access to functions, strings, imports, xrefs, instructions, types - Unified Entity Search - jump_entities() searches everything: functions, types, members, enums (think "Jump Anywhere") - Standalone CLI - Query .i64 files without opening IDA GUI - IDA Plugin - SQL/AI interface inside IDA's command line - Remote Server - Query IDA from external tools, scripts, or coding agents - IDA SQL is built on top of libxsql and libagents

@chompie1337 Complaining about a free email service with a focus on privacy because it can't defy the bounds of the email protocol.

Not only can Proton Mail read your emails, but they’re subject to the same subpoenas and lawful government requests as Google. Real privacy requires end-to-end encryption, which users have to actively adopt, and most don’t because it’s hard and annoying.

@rjmalagon @OutflankNL The content itself presents nothing of new value. I don’t have issues with AI revision for clarity if the original content has value, but in this case it’s just fluff.

@LabGuy94 @OutflankNL "AI slop" is too vague. What in the article is wrong or poorly sourced? The criticism is about plausible AI formatting?

Let's play peekaboo with PatchGuard! Read our blog post about hiding processes on modern Windows systems with HVCI enabled: outflank.nl/blog/2026/01/0…

@Chuck6703880517 I personally don’t spend much time performing code audits, but I would call this win32 semi low level security.

@LabGuy94 Hi dude this is a nice one! Do you focus more on code auditing? This article seems a new realm for me. I only know implicit concepts of virtual memory, pages stuff. What is this type of security?

github.com/LabGuy94/CopyM… readcc.net/posts/copymywr… Released my POC which earned me a 3000$ bug bounty.

@mkolsek Unfortunately, no CVE ID has been assigned to this vulnerability yet. I am in contact with a Microsoft however, and hope to see one produced from that.

@LabGuy94 Great work! Can you share CVE ID assigned to this issue?

@Pinus9264 Glad you found it interesting!

@LabGuy94 So amazing, so shocking

@JosephKanko4 Hope you learned something!

@LabGuy94 thanks