Sinaei

I'm happy to announce that @HyperDbg v0.14 is released! This version includes HyperEvade (beta preview), fixes Win11 24H2 compatibility issues, and adds multiple timing functions to the script engine (Special thanks to @0Xiphorus). Check it out: github.com/HyperDbg/Hyper… (1/3)

A new post (with a new website design) is finally out: idov31.github.io/posts/hypervis…. After two years, I wanted to start posting again and really wanted to share something that contains some technical details about hypervisors, my opinions on utilizing hypervisors for defense and 1/2

HyperDbg v0.18 is released! 🎉✨ This version adds support for including external scripts using `#include` in the script engine, as well as initial refactoring for potential future support for Linux. Check it out: github.com/HyperDbg/Hyper…

Ever wanted to draw a triangle with OpenGL as a 2kb position-independent shellcode? No? Me neither. But you can do it anyway: github.com/wbenny/scfw

Slides and recordings for our @FOSDEM talks are up! Join an in-depth introduction into @HyperDbg 's features and internals, or find out what's the latest in anti-anti-debugging techniques and HV transparency for malware reversing: fosdem.org/2026/schedule/… fosdem.org/2026/schedule/…

Dropping some tooling to assist with Windows RE (or any really); bulk download modules across all versions, search for call chains from references, immediates, instructions, etc. Has been useful for mass-analysis, cross-version diffing, variant analysis, and just generally locating candidates for more thorough investigation (ioctl dispatch, rpc handlers/chains, what functions eventually call a desired target). github.com/daaximus/ida-r…

Curious about anti-anti-debugging techniques and hiding hypervisors from malware? Or simply looking for an in-depth introduction to @HyperDbg? Join @Intel80x86 and my @FOSDEM talks tomorrow: fosdem.org/2026/schedule/… fosdem.org/2026/schedule/…

@vxunderground Thanks for mentioning me.❤️

In regards to "cyber influencers", here is a list of people I think are actually great. However, I am extremely biased toward malware related content and/or low-level programming stuff. Unfortunately, some of the really technical people I like also do not post too often. They seem to appear out of thin air, release something spectacular, then disappear back into the ether. - @vx_herm1t, inspiration of vx-underground - @tmpout, linux malware stuff - @LloydLabs, malware researcher - @_ForrestOrr, malware researcher - @_winterknife_, low-level development - @splinter_code, security researcher - @decoder_it, security researcher - @gynvael, security researcher - @LukasStefanko, malware researcher - @bmmaloney97, DFIR researcher - @hasherezade, malware researcher - @SBousseaden, security researcher - @Intel80x86, low-level development - @0gtweet, security researcher - @push_pnx, malware researcher - @_xpn_, security researcher - @ItsGamerDoc, anti-cheat researcher - @herrcore, malware researcher - @CyberCakeX, Windows defense, hardening - @TwoSevenOneT, security researcher - @NTDEV_, low-level development - @daaximus, reverse engineering - @JRoosen, malware researcher - @PetrBenes, low-level development - @x86matthew, low-level development - @0xrepnz, low-level development I'm getting tired of listing people now. This is just a brief list. All of these people are exceptionally talented and have inspired me in my personal research. There are a lot more who are also super talented and do great things.

Our paper "TRM: The Reversing Machine" has been accepted to @asiaccs2026! TRM is developed on top of @HyperDbg and exposes stealthy sub-OS malware using transparent hypervisor introspection, detecting threats missed by 24 AV engines. Preprint arxiv.org/abs/2405.00298 @Intel80x86

@XenoKovah @vu5ec @OpenSecTraining It was a pleasure meeting you there as well. 🥂

I was invited to give a talk at @vu5ec while I was in AMS. I talked to the students about the value of grabbing vocational skills from @OpenSecTraining, to boost their resumes. And I got to meet #OST2 instructor Sina @Intel80x86 (ost2.fyi/Dbg3301) as he’s a PhD there

The paper link is below, and we’ll be releasing the benchmark and source code very soon! Paper Link: arxiv.org/abs/2506.00313

HyperDbg v0.17 is out! ✨🥂 This update brings major improvements to the script engine, including multidimensional arrays, compound & multiple assignments, plus key interpretation bug fixes. Check it out: github.com/HyperDbg/Hyper…

🔥🔥🔥⌛️

Ever wondered what happens when LLMs come to life? In my latest video, I turned popular open source LLMs into animated characters! 🦙🐳✨ They’re the prerequisites for my upcoming series on binary analysis and reverse engineering. 🧩👀 Check it out: youtu.be/bHOkMYoBVT0

🚀 We're excited to announce the release of FuzzForge Open Source (OSS)! FuzzForge is our open-source platform designed to automate offensive security workflows & AI Agents, from static analysis to fuzzing, debugging, and root cause analysis, all with AI assistance. 🔷 Open-source release is the first step toward our vision of "Offensive-Security-as-Code." 🔷 Workflows you can run, share, and extend. 🔷 Built by the team at @FuzzingLabs. Github : github.com/FuzzingLabs/fu… Join the Alpha Waitlist : fuzzforge.ai We've also launched the FuzzingLabs Community Discord where researchers, engineers, and security enthusiasts can connect and collaborate: 👉 discord.com/invite/acqv9FVG Come join us and Let's forge the future of AppSec & Offensive Security together! #FuzzForge #Fuzzing #AppSec #OpenSource #CyberSecurity

The release of the "Trusted Computing 1102: Intermediate Trusted Platform Module (TPM) usage" class (ost2.fyi/TC2202) has updated 3 #OST2 learning paths: "Secure Software Design & Implementation" - ost2.fyi/OST2_LP_SecDev… "System Security" - ost2.fyi/OST2_LP_SysSec… "Windows Security" - ost2.fyi/OST2_LP_Window… PDFs are vector-based for full quality when zooming, and have click-to-go-to-class links

Updated #PEsieve / #HollowsHunter / #MalUnpack: github.com/hasherezade/pe… / github.com/hasherezade/ho… / github.com/hasherezade/ma… - check them out 💙

🚀 It’s official — my new book is live on Amazon: MAoS – Malware Analysis on Steroids This book is not like the others. It’s built on years of raw, hands-on research, reverse engineering sessions at 3 AM, and real-world incident response cases. Inside, you’ll find full A–Z dissections of malware: loaders, persistence tricks, obfuscation layers, evasive logic, and more. It’s written for analysts, red teamers, defenders, SOC teams, and anyone who wants to think like an attacker in order to act like a defender. This isn’t a theory book. This is malware analysis on steroids. 👉 Get your copy here: amazon.com/dp/B0FQDGZGZW #CyberSecurity #MalwareAnalysis #ReverseEngineering #Infosec #MAoS #TrainSec #OffensiveSecurity #Malware

Chypnosis: Undervolting-based Static Side-channel Attacks to appear in @IEEESSP Precisely dropping chip voltage disables clocks/sensors but retains data, enabling static SCA extraction With Kyle Mitard, @S4l3hh, Fatemeh Dana, @yuvalyarom & Shahin Tajik arxiv.org/abs/2504.11633

Today I am releasing a new blog post on VSM "secure calls" + the SkBridge project to manually issue them!! This blog talks about how VTL 0 requests the services of VTL 1 and outlines common secure call patterns!!! Blog: connormcgarr.github.io/secure-calls-a… SkBridge: github.com/connormcgarr/S…

New video in my LLM for Reverse Engineering series! 📺✨ This time, I dive into Hugging Face, LM-Eval-Harness & AI leaderboards, the backbone of measuring and tracking modern AI progress. Watch here: youtube.com/watch?v=zHZMr0…