Ravshan R
24 posts


asked my son what he wanted to be when he grew up
he thought for a moment, and said
"the ideal career trajectory seems to be starting at a high-growth series A startup, so i secure high stock upside without being too early. i'd probably enter senior management by the later fundraises, and after the IPO work my way into a CTO role. then, Anthropic can poach me for a $20m pay package to become a member of the technical staff, whatever that means, and i'll be pretty much set for life to buy some land in Montana and raise sheep on a farm, the true goal of anyone working in tech"
he's 37 and i'm so sick of him
English
Ravshan R retweetledi

Striga: Lifting x86 to LLVM IR with Python by @mrexodia
secret.club/2026/05/21/str…
English
Ravshan R retweetledi

It’s been quite a while after we wrapped up #PHtalks in Kuala Lumpur 🇲🇾 Time to say a few words:
Damn amazing everything went over there! Thank you, community ❤️




English
Ravshan R retweetledi
Ravshan R retweetledi
Ravshan R retweetledi

Anti-cheats live in the kernel. So do we. Kernel Wars covers anti-cheat reversing, BYOVD abuse, and what actually helps against it. Hear @arzedlab at #PHTalks Kuala Lumpur 🇲🇾: phtalks.ptsecurity.com

English

@eternalsakura13 @offensive_con Waiting a talk, some fresh air after AI bug hunters
English

Ravshan R retweetledi

🚨 Speaker Announcement – #BSidesPrague2026
🎤 Ravshan Rikhsiev
Adventures in Router Firmware Through Dynamic Taint Analysis
A deep dive into router firmware vulnerabilities using dynamic taint analysis and advanced VR techniques.
#BSides

English

@HaifeiLi Probably will be more like "probably there is a zero day but not exploitable"
Folks prompting, but no idea how does AI give results, and most interesting moment, they verify result by asking AI.
I think due to over abstraction, it is hard to find deep bugs with AI.
English

Re: AI finding bugs..
Folks used to use CPUs to run fuzzers to find bugs, now they use GPUs to run models to find bugs. It’s essentially another way of fuzzing. A verifying process is built upon the nondeterministic output by fuzzer or AI.
But there’re some differences: An individual researcher can do fuzzing at home and find serious bugs - I’ve been doing it for long time, the ROI is very good if you “fuzzing it right”. Now serious AI bug finding seems can only be performed by resource-rich companies..
What’s the ROI of AI bug findings? Can it be improved in future eg. the ROI can be very good if you “prompting it right”, or when “the model is good enough and using it is cheap enough”?
English

woah👀
mozilla.org/en-US/security…
22 vulns from "Information to follow"...
English
Ravshan R retweetledi

Cybersecurity roles from most to least technical:
- 0day researcher
- exploit dev
- reverse engineer
- malware dev
- appsec & devsecops
- red teamer
- DFIR
- SOC analyst
- compliance
- third party risk management
- web app pentester
- Amish farmer
- CISO
- newborn baby
- any cybersecurity Twitter account with over 5k followers
English
Ravshan R retweetledi

Reinforcement Learning for Hacking?
s1r1us.ninja/posts/reinforc…
English
Ravshan R retweetledi
Ravshan R retweetledi

@jstrosch @0x6D6172636F @0x6D6172636F May I ask how you made a style like this did you draw everything yourself or are there any tools?) thank you for your response, I am also motivated to make blogs' style like this!
English

Great intro to #reverse #engineering blog by @0x6D6172636F along with some amazing #ascii art!
x86re.com

English















