allthingsida

484 posts

allthingsida

allthingsida

@allthingsida

All things IDA, security, reverse engineering, programming, AI and more. Friend and fan of Hex-Rays but non-official.

USA Katılım Mart 2023
354 Takip Edilen4.6K Takipçiler
allthingsida retweetledi
REcon
REcon@reconmtl·
REcon is right around the corner. Early-bird training pricing has been extended, and conference tickets remain at March rates until May 11. Conference: June 19 to 21 2026 Training: June 15 to 18 2026 Location: Montreal, Canada Heads up: hotel booking cutoff is next week too. If you live in IDA, Ghidra, or a debugger, this is your conference. recon.cx/2026/en/index.… #REcon #RE #reverseengineering #InfoSec
REcon tweet media
English
0
14
20
2.5K
allthingsida retweetledi
eversinc33 🤍🔪⋆。˚ ⋆
Made a little experiment of lifting IDA microcode to z3 to automatically resolve opaque predicates. It works quite well on a few malware families I tested on. In the gif you can see Lumma stealer's opaque predicates being solved automatically:
GIF
English
1
27
199
10.8K
allthingsida
allthingsida@allthingsida·
libghidra was needed for the ghidrasql project which will complement idasql and bnsql. You can grab the 0.0.1 (alpha) release from here: github.com/0xeb/libghidra/. 9/9
English
0
1
21
931
allthingsida
allthingsida@allthingsida·
libghidra can run Ghidra’s native decompiler engine from a normal C++ executable: no Java process, no UI, no HTTP server. The build embeds the processor specs, and the app can open a binary, list functions, decompile, rename, type, and inspect data offline. 8/n
English
1
0
6
1.1K
allthingsida
allthingsida@allthingsida·
I've been building libghidra: a typed SDK for automating Ghidra from C++, Python, and Rust (mainly for AI agents). Decompile, rename, comment, inspect symbols/types/xrefs, save, close, and reopen projects from code. Treat Ghidra like infrastructure, not just a GUI. Under the hood this is a typed API surface over a Ghidra host/extension. The same core workflows exist across C++, Python, and Rust, so you can use it for quick scripts, larger pipelines, or native tooling. 1/n
allthingsida tweet mediaallthingsida tweet mediaallthingsida tweet media
English
4
59
520
31.7K
allthingsida
allthingsida@allthingsida·
Codex to the rescue
allthingsida tweet media
English
1
1
21
3.9K
allthingsida
allthingsida@allthingsida·
I did not know Ghidra does that. Sorry, if this is silly, I stumbled upon it by accident.
English
10
54
1K
64.9K