Mike Hunhoff

🎉 We’ve released capa v9.4 with 26 new rules and various performance improvements. Additionally, the standalone tool now supports Ghidra as a feature extraction backend. Check out the release for more details 👉 github.com/mandiant/capa/…

Speakeasy emulator v2.0.0b2 just dropped. Many more improvements by @williballenthin. Please provide feedback before we release v2 in the upcoming weeks. - pypi.org/project/speake… - github.com/mandiant/speak…

The most 1337 AMSI bypass for the CLR ever.

After hours of Flutter AOT reversing, Dart object pool decoding & AES key derivation tracing, I became the first globally to crack DroidPass Full write-up reversethat.app/reverse-engine… #Android #AndroidSecurity #ReverseEngineering #CTF #Flutter #Dart #8ksec #DroidPass

Just published my #flareon12 challenge 8 write-up Spent hours playing with Intel Pin (wrong path 😅), then switched to a bottom-up event-based approach using WinDbg TTD, x64dbg, ret-sync & IDA — felt like cracking old game trial licenses again 😄 🔗 reversethat.app/posts/flareon1…

completed #flareon12 this year, even with some slacking in between. my first set of writeups (for levels 1 to 6) are in the reply to this tweet. will be posting the rest in due time!

Here's how the obfuscation in #flareon12 challenge 7 looks like in source - all just junk code 🗑️

Even a decade later, this is still one of the best references on malware analysis. I remember spending an entire summer studying this book religiously. I owe the start of my career to it. Waiting for the update @nostarch 🤓

Here are some new posts on #flareon12 ## Challenge 6 - Chain of Demands blog.0wl.sg/docs/y2025/oct… # Mainly focusing on Deobfuscation with Binja ## Challlenge 7 - The Boss Needs Help blog.0wl.sg/docs/y2025/oct… ## Challenge 8 - FlareAuthenticator blog.0wl.sg/docs/y2025/oct…

Well, I don't know where the official solutions for #flareon12 are, but mine are here ;) milanspinka.com/blog/ctf-write… @Mandiant

That's a wrap #flareon12 read the official solutions and see the prize here: security.googlecloudcommunity.com/community-blog…

Looks like #flareon12 will have similar finisher numbers to last year. #flareon11 had 275 players that solved all levels. With 14 hours left we're at 295 players this year.

Looking very much forward to all the #flareon12 write ups!

One day to go! #flareon12 Here's a breakdown of the current registered users and challenge solve counts.

3 days left for #flareon12 - keep pushing everyone! And also remember if you've solved challenge 7 you're in the top 10% of all players...

Congrats to the over 200 #flareon12 finishers! 4 days to go. Good luck to about 140/80/186 players on challenge 7/8/9 respectively and everyone else!

preview: ida-cyberchef #idapro #cyberchef

FLARE-VM just got a serious upgrade — new GUI, automated builds, and 288+ tools (with better IDA + Go support). The latest update brings: 🧰 Revamped installer ⚙️ New Python script for full VM automation 📚 (cont) bit.ly/48VetqY

Simpler Access for a Stronger VirusTotal We’re simplifying access to VirusTotal with clearer tiers and flexible options, keeping the platform open, collaborative, and built around our contributors. Read more: blog.virustotal.com/2025/10/simple…

VirusTotal is back. Well, we never really left… but just in case: