Sabitlenmiş Tweet
Due to some missing links on the conference web pages, I uploaded my conference talk pdfs for 10 years. Time flies. speakerdeck.com/takahiro_haruy…
English
Takahiro Haruyama
4.6K posts
Takahiro Haruyama retweetledi
we will present our work on practical binary type recovery at ACM CODASPY '26!
prior work rarely focused on applicability:
too slow, no meaningful filtering mechanisms, unsound struct recovery
we address these gaps and present a system for headless type recovery at scale
English
Takahiro Haruyama retweetledi
Slides and demos for our @REverseConf talk by @francesco_ev and @xorpse are up! If you missed the conference, now's you're opportunity to take a look at the talk content and demos.
Slides & demos: github.com/binarly-io/Res…
VulHunt framework: vulhunt.re
English
Takahiro Haruyama retweetledi
VulHunt: vulnerability detection framework by @binarly_io
github.com/vulhunt-re/vul…
Accompanying blog series:
binarly.io/blog/vulhunt-i…
binarly.io/blog/vulhunt-i…
binarly.io/blog/vulnerabi…
binarly.io/blog/vulhunt-i…
binarly.io/blog/agentic-v…
#infosec
English
Takahiro Haruyama retweetledi
As part of our vulhunt.re release, we've also dropped few rules! First up is a rule to detect a #LogoFAIL variant (CVE-2023-40238) in a UEFI DXE driver for BMP decoding...
Test case(s): github.com/vulhunt-re/tes…
Rule: github.com/vulhunt-re/rul…
English
Takahiro Haruyama retweetledi
Vulhunt is now open-source, this is a game changer: github.com/vulhunt-re/vul… @binarly_io @vulhuntdev
English
Takahiro Haruyama retweetledi
The dream of a fast and reliable binary analysis framework is now a reality.
Today, we’re open sourcing VulHunt.RE 🎉
code: github.com/vulhunt-re/vul…
docs: vulhunt.re/docs
A huge kudos to the entire REsearch team!
Alex Matrosov@matrosov
This year at @REverseConf, we’re dropping something special, a project we’ve been heads-down on for a while that boosts semantic-level binary detection with reachability + taint analysis. Like CodeQL/Semgrep, but for binaries. VulHunt use cases: Vuln REsearch: binarly.io/blog/vulnerabi… Detection Eng: binarly.io/blog/vulhunt-i… VH Intro: binarly.io/blog/vulhunt-i…
English
Takahiro Haruyama retweetledi
VulHunt is the culmination of 4 years of R&D with a goal to scale vulnerability detection in binaries. While the foundation is built on tried and true static analysis techniques, we’ve embraced the AI era and expose VulHunt’s capabilities to agents and tools via MCP and skills.
GIF
English
Takahiro Haruyama retweetledi
We @binarly_io just open-sourced our VulHunt framework at @REverseConf!
GitHub: github.com/vulhunt-re/vul…
Documentation: vulhunt.re/docs
Slack: join.slack.com/t/vulhunt/shar…
vulhunt.re
English
Takahiro Haruyama retweetledi
@francesco_ev is presenting VulHunt at @REverseConf today! Alongside the talk, we're also releasing the framework and tooling as open-source.
vulhunt.re
English
@pr0me @REverseConf I hope you will get well soon, Lukas :-)
English
due to a bad case of influenza, I am in no condition to travel and won't be able to make it to @REverseConf 💔
was really looking forward to meeting old and new friends.
hope y'all have a great conf!
English
Takahiro Haruyama retweetledi
In the last blog of our VulHunt series, we explore what happens when VulHunt meets LLMs. We show how LLM-guided workflows can automate vulnerability triaging and hunting, reducing the manual effort required for binary analysis.
binarly.io/blog/agentic-v…
English
Takahiro Haruyama retweetledi
NSAのGhidraの公開から7年・・・Ghidra✖️AI、メカギドラを公開します!
- pyghidraによるヘッドレス実行でプラグインインストール不要
- プロジェクトへのロード、解析対象の切り替え、並列化に対応
- Ghidra Serverにも対応、24/7稼動する最強のチームメイトと協力して解析！
github.com/ghidra-user-jp…
日本語
Takahiro Haruyama retweetledi
In today's instalment of our VulHunt series, we walk through VulHunt’s capabilities in detail. We show what VulHunt can detect, explain how it performs analysis, and how it represents findings for maximum actionability.
👉 binarly.io/blog/vulhunt-i…
English
Takahiro Haruyama retweetledi
This year at @REverseConf, we’re dropping something special, a project we’ve been heads-down on for a while that boosts semantic-level binary detection with reachability + taint analysis. Like CodeQL/Semgrep, but for binaries.
VulHunt use cases:
Vuln REsearch: binarly.io/blog/vulnerabi…
Detection Eng: binarly.io/blog/vulhunt-i…
VH Intro: binarly.io/blog/vulhunt-i…
English
Takahiro Haruyama retweetledi
We❤️Open Source! As part of the release of our VulHunt tooling at @REverseConf this year, we're giving back to the REsearch community by releasing al Rust bindings for the amazing @uefitool.
Learn more:
github.com/binarly-io/bia…
github.com/binarly-io/bia…
English
Takahiro Haruyama retweetledi
Continuing our VulHunt blog series, we adopt the mindset of a vulnerability researcher and attempt to uncover a number of vulnerabilities in a router's firmware: binarly.io/blog/vulnerabi…
English
Takahiro Haruyama retweetledi
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…
English
Takahiro Haruyama retweetledi
When we started @binarly_io, we had a goal: bring code-level detections (think CodeQL/Semgrep) to binaries. Not just byte patterns like YARA, but rules built on semantic meaning and program behavior.
Now that the tech is proven & scaled, we’re bringing VulHunt to @REverseConf.
Sam Thomas@xorpse
@francesco_ev will be presenting VulHunt, our framework for scalable vulnerability detection and hunting, at @REverseConf this year!
English
Takahiro Haruyama retweetledi
It was a pleasure to contribute to year one of @DistrictCon with the “Broken Trust: Firmware Bypass Chains, BMC Persistence, and EDR Evasion” talk alongside @pagabuc @ant_av7 @yeggorv @xorpse
Slides: github.com/binarly-io/Res…
Detailed blog post + advisories go live tomorrow!
Alex Matrosov@matrosov
On my way to @DistrictCon with new firmware update verification bypass on Supermicro BMCs (previously "fixed"). NEW: CVE-2025-12006 & CVE-2025-12007) @ant_av7 👏 Backstory: Ghost in the Controller binarly.io/blog/ghost-in-… Broken Trust binarly.io/blog/broken-tr… Stay tuned!
English
高額療養費制度が改悪されると、ほとんどの収入世帯の人が、重い病気になった時に医療費のせいで貧困層に陥る。選挙に行こう。
林英恵 ・Down to Earth代表・公衆衛生学者・『健康になる技術大全』@HanaHayashi_DTE
【体調最高ラジオ・特別回】話題の「高額療養費制度」。知らないうちに決まりかねない制度変更が、誰の生活に、どんな影響を与えるのか。数字と現場の声から見えてくるのは、医療の話であり、暮らしの話であり、これからの選択の話。選挙前に、立ち止まって考えたいテーマです。医療統計学者の伊藤ゆり先生に、たっぷり語っていただきました。国民の誰もにかかわる話です。 podcasts.apple.com/jp/podcast/%E7…
日本語