Binary Wizards

587 posts

Binary Wizards banner
Binary Wizards

Binary Wizards

@BinaryWizards

Binary Wizards: security, reverse engineering, programming, AI and more.

USA Katılım Mart 2023
549 Takip Edilen5.2K Takipçiler
Sabitlenmiş Tweet
Binary Wizards
Binary Wizards@BinaryWizards·
Friends, @allthingsida was a fun experiment while it lasted. The account is now parked and links to @BinaryWizards. The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel: @binary-wizards" target="_blank" rel="nofollow noopener">youtube.com/@binary-wizards I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella. Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.
Binary Wizards tweet media
English
5
28
137
8.7K
Binary Wizards
Binary Wizards@BinaryWizards·
@HryHryxdd I'm not sure if you also asked me the same question before but my answer is simple and the same try it and find out . Watch the video first to learn how to use it.
English
0
0
0
53
Binary Wizards
Binary Wizards@BinaryWizards·
My vibe coding station
Binary Wizards tweet media
English
2
1
7
1.8K
Andrew Milich
Andrew Milich@milichab·
I worked on building an end-to-end encrypted email/docs/files/calendar app @skiffprivacy for 4 years and care deeply about privacy. ZDR and /privacy are always respected in Grok Build - and swapping your setting with /privacy deletes any synced data retoractively
SpaceXAI@SpaceXAI

We care deeply about your privacy and respect customer choice. For teams using zero data retention, no trace and code data is ever retained. All API key use of Grok Build also respects ZDR. If ZDR is disabled, the /privacy command is available in the CLI to disable data retention, which also deletes previously synced data. Run the /privacy command to view or change your settings at any time.

English
164
123
2.4K
3M
Binary Wizards
Binary Wizards@BinaryWizards·
Thanks for your efforts @jeppojeps !
OpenSecurityTraining2@OpenSecTraining

📣"Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" released!📣 ost2.fyi/Arch1901 This class by Antonio Nappa @jeppojeps of Fuzz Society @fuzzsociety_org builds up your knowledge from learning a toy 8-bit CPU architecture all the way to understanding how QEMU can emulate that architecture. Using this knowledge you can then understand how QEMU can emulate any architecture!

English
0
3
15
1.9K
Binary Wizards
Binary Wizards@BinaryWizards·
@momo5502 Dude. Always with the cool features!! I like where this is going.
English
0
0
2
326
Maurice Heumann
Maurice Heumann@momo5502·
I've been working on Steam passthrough in sogen.dev. Forwarding Steam interaction from the sandbox to the host seems to be working. That means playing actuall MW2 matches in real lobbies is now safely doable in Sogen's sandbox 🥳
English
12
24
411
36.1K
Binary Wizards
Binary Wizards@BinaryWizards·
@inflearner I get asked this one many times. The best answer is: go try it, follow my video and see for yourself.
English
0
0
0
45
Binary Wizards
Binary Wizards@BinaryWizards·
Stop reverse engineering by hand. New video: I introduce IDASQL, the first tool in the xSQL family. It exposes IDA Pro's database and API as live SQL, so your AI agent can query a binary the way it queries a database. Headless RE, source recovery, multi-binary queries. youtu.be/OSfuKLWMtAA
YouTube video
YouTube
English
4
32
151
29.4K
Binary Wizards
Binary Wizards@BinaryWizards·
I would like to add that querying is not just read only. The tooling has full CRUD capabilities. So the AI agents can manipulate the database fully (annotations, type recovery, type application, segments and bytes manipulations, etc. ). Almost all of the IDASDK surface is accessible via the xSQL bindings. The same thing applies to other tooling like Binary Ninja, Ghidra and Radare2 as future videos will show.
English
0
0
2
732
Binary Wizards
Binary Wizards@BinaryWizards·
(Subscribers count is not important but just for visibility if you have been subscribed to the previous channel please re-subscribe again to this new channel)
English
0
0
0
740
Binary Wizards
Binary Wizards@BinaryWizards·
And of course, a bonus simple integration in IDA GUI
Binary Wizards tweet media
English
1
0
6
967
Binary Wizards
Binary Wizards@BinaryWizards·
Introducing IDA SQL [ github.com/allthingsida/i… ], a tool I have been sleeping on since last summer. It takes a different approach to exposing IDA database and make it extremely friendly to Coding Agents and CLI tools. - AI Agent - Natural language queries with Claude or GitHub Copilot #copilotsdk - SQL Interface - Full SQL access to functions, strings, imports, xrefs, instructions, types - Unified Entity Search - jump_entities() searches everything: functions, types, members, enums (think "Jump Anywhere") - Standalone CLI - Query .i64 files without opening IDA GUI - IDA Plugin - SQL/AI interface inside IDA's command line - Remote Server - Query IDA from external tools, scripts, or coding agents - IDA SQL is built on top of libxsql and libagents
English
3
52
232
22.6K
Binary Wizards
Binary Wizards@BinaryWizards·
I know a video about how to use idasql and how to configure is due. Meanwhile, some basic stuff it can do: Let Copilot CLI (autopilot mode) + Opus 4.6 | GPT 5.3-codex-high + idasql go after Beep.sys driver, and recover it fully: - The models know about drivers RE - They can nicely follow and recursively deal with dispatch table - Recover the driver object extension type - Systematically go after the whole binary Of course, all of the above are basic scenarios that 'just work' due to how agent harnesses work when given the right tools. idasql is just one tool in your arsenal, it is not magic and with other tools and the right prompting, you can have a more pleasant experience with IDA.
Binary Wizards tweet mediaBinary Wizards tweet mediaBinary Wizards tweet mediaBinary Wizards tweet media
English
5
18
129
17.4K
Binary Wizards
Binary Wizards@BinaryWizards·
Better late than never. If you have not yet used IDASQL (or the xSQL vibe-re family), then now you can learn how to do so, or how to do it the 'right' way: youtu.be/OSfuKLWMtAA
YouTube video
YouTube
Binary Wizards@BinaryWizards

I know a video about how to use idasql and how to configure is due. Meanwhile, some basic stuff it can do: Let Copilot CLI (autopilot mode) + Opus 4.6 | GPT 5.3-codex-high + idasql go after Beep.sys driver, and recover it fully: - The models know about drivers RE - They can nicely follow and recursively deal with dispatch table - Recover the driver object extension type - Systematically go after the whole binary Of course, all of the above are basic scenarios that 'just work' due to how agent harnesses work when given the right tools. idasql is just one tool in your arsenal, it is not magic and with other tools and the right prompting, you can have a more pleasant experience with IDA.

English
0
8
33
6K
Binary Wizards
Binary Wizards@BinaryWizards·
This photo from the slides is my favorite ;)
Binary Wizards tweet media
English
1
2
6
2.4K
Pedro Ribeiro
Pedro Ribeiro@pedrib1337·
@allthingsida @reconmtl Wish I had attended that talk, thanks for the slides! Which one (IDA, Ghidra, Binja) do you recommend for headless operation by LLM?
English
4
0
3
1.1K
Binary Wizards
Binary Wizards@BinaryWizards·
PSA: if you are still in @reconmtl and want a hands on (announced last minute)session related to my talk, then bring your laptop and let me walk you through how to use the xSQL family (IDA, BN, Ghidra) to vibe RE. Bring your Claude Code or Codex subscriptions with you. Otherwise just buy 10$ credits from DeepSeek to use with DS Flash or Pro. 10$ goes a lonnng way, and configure it with your favorite harness (Claude Code, Codex, Pi, etc. ). Meet me on Sunday at 1PM in Soprano C or check the updated REcon schedule. I will delete this post later.
Binary Wizards@BinaryWizards

Slides are out. Please grab them from here: #select--from-binary---vibe-reversing-across-ida-ghidra-and-binary-ninja--recon-2026-montreal" target="_blank" rel="nofollow noopener">github.com/allthingsida/a…

English
1
6
37
5.4K
Binary Wizards
Binary Wizards@BinaryWizards·
Much appreciated. I am happy to see adoption of IDASQL/the xSQL family. Even at REcon, last month, people who attended my last minute workshop were very happy with the performance of this tooling (Ghidra and Binary Ninja included, and operated the same way with your coding agents).
kernullist@kernullist

Lately, I’ve been using pseudoforge-kernel-corpus to put together Windows kernel training material for new members of my team in my spare time. The model can query a deterministic corpus of functions, EAs, refs, and artifacts, then answer with traceable evidence. The attached TI diagram shows one example of tracing where the Anti-Malware PPL requirement is enforced. Also putting together analysis material for the team with IDASQL, and strongly recommend giving IDASQL a try. Thanks for releasing such a great tool, @BinaryWizards ☺️

English
0
0
20
1.9K
Binary Wizards
Binary Wizards@BinaryWizards·
Curious+Honest question: LLMs can just automatically do this kind of recovery. Why bother with a UI and dedicated commands? For instance, IDASQL with CC and Opus, can recover types, IOCTLs, apply them in the decompiler, etc. just natively. One prompt, and zero UI. What’s your goal in your case / plugin? I know many users just want to prompt an agent and get things done and spend less time with UIs.
English
1
0
4
459
kernullist
kernullist@kernullist·
PseudoForge now helps turn opaque command buffers into readable structures. It traces selector-based handlers across helper calls, recovers C++-style input/output layouts, and shows the field values needed to stay out of error paths. IOCTLs are the first showcase, but the same idea applies to InformationClass APIs, IPC parsers, hypercalls, and other native command handlers. No pdb required. repo: github.com/kernullist/Pse…
kernullist tweet mediakernullist tweet media
English
1
0
29
2K

Keşfet

@HryHryxdd @trustednstaller @herrcore @OpenAIDevs @IceSolst @skiffprivacy @milichab @jeppojeps