Coldzer0 @Coldzer0x0

Senior Offensive security engineer @EG_CERT | { Opinions are my own } Offensive Tools Developer, Malware Analyst, Reverse Engineer 🦠 github.com/Coldzer0 Coldzer0#0000 Joined March 2013

Tweets

61
Followers

1K
Following

380
Likes

415

ö @r0keb

4 weeks ago

Good Morning! Just published a blog post analyzing Hyper-V functionality, design, and key binaries, hvix64.exe (hypervisor), securekernel.exe (secure kernel), and winload.dll (boot-time loader and CPU check). r0keb.github.io/posts/Hyper-V-…

4 82 278 16K 152

x64dbg @x64dbg

2 months ago

We're excited to announce a major new release of x64dbg! The main new feature is support for bitfields, enums and anonymous types, which allows all types in the Windows SDK to be represented and displayed 🔥

12 266 1K 72K 412

Download Video

Tim Blazytko @mr_phrazer

2 months ago

The slides from our @reconmtl talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolodev), are now online! Slides: synthesis.to/presentations/… Plugin: github.com/mrphrazer/obfu…

1 47 146 19K 77

Download Image

Coldzer0 @Coldzer0x0

4 months ago

Added support for newer Delphi versions and IDA 9.x github.com/Coldzer0/IDA-F… #IDA #IDA_For_Delphi #ReverseEngineering

2 23 102 9K 49

João Vitor(Keowu) @keowu

4 months ago

My new article, "Writing a Full Windows ARM64 Debugger for Reverse Engineering," covers the topic in detail, including its internals and the core differences between Windows on Intel and ARM64: keowu.re/posts/Writing-…

4 84 266 22K 176

herm1t @vx_herm1t

5 months ago

My old/new blog herm1tvx.blogspot.com

2 5 31 6K 22

Dylan Tran @d_tranman

6 months ago

Had a lot of fun digging into COM stuff with @bohops recently! We ended up finding a way to laterally move without dropping a file. ibm.com/think/news/fil…

12 179 533 74K 274

Hiroshi Suzuki @herosi_t

6 months ago

I updated PyClassInformer to add several new features such as auto-renaming virtual methods, detecting user-defined classes, detecting possible constructors and destructors, tree-based widget to display class-related information and so on. github.com/herosi/PyClass…

Hiroshi Suzuki @herosi_t

6 months ago

0 29 81 24K 38

1 28 98 17K 49

Download Image

Binni Shah @binitamshah

12 months ago

Bytecode Reuse Attack (Part 4) : lolcads.github.io/posts/2024/09/… Bytecode Injection (Part 3) : lolcads.github.io/posts/2024/09/… Fundamentals for Bytecode Exploitation (Part 2) : lolcads.github.io/posts/2024/09/… Introduction to Android Bytecode Exploitation (Part 1) : lolcads.github.io/posts/2024/09/…

0 53 164 13K 91

Download Image

Benjamin Rosseaux @coder

3 years ago

New blog post on my primary english blog: "Why Object Pascal is More Than Meets the Eye: Exploring the Power and Versatility of Delphi and FreePascal" blog.rosseaux.net/post/a346cfec6… @freepascaldev @EmbarcaderoTech @SciPasTips

2 3 23 1K 1

Pavel @sadreck

3 years ago

Codecepticon v1.1.0 just released! You can now: 👉Generate certificates and... 👉...sign executables, in order to... 👉...bypass even more AVs with one simple trick! github.com/Accenture/Code…

1 54 136 14K 40

Maxim Goryachy @h0t_max

3 years ago

Today we've published Intel Microcode decryptor! It gives you an amazing opportunity for researching x86 platforms. You can understand how Intel mitigated spectre vulnerability, explore the implementation of Intel TXT, SGX,VT-x technologies! Enjoy it! github.com/chip-red-pill/…

24 784 2K 0 362

Download Image

Coldzer0 @Coldzer0x0

3 years ago

After I finished compiling clang LLVM I typed “ninja clean” in the wrong cmd window 🤬

0 0 2 0 0

Download Video

Coldzer0 @Coldzer0x0

3 years ago

A small project to Enum all PDB Symbols using Imagehlp Library. github.com/Coldzer0/TinyP…

0 10 56 0 12

Coldzer0 @Coldzer0x0

3 years ago

You can check Windows Product version with just 1 line. bool CheckProductVersion(uint32_t Product) { return *((uint32_t *) 0x7FFE0264) == Product; } Offensive Dev Tips. #Offensive #tip_1

0 1 9 0 2

Download Image

Sylvain Peyrefitte @citronneur

3 years ago

Time Travel Debugging for #IDA !!! github.com/airbus-cert/tt… #SSTIC. Thanks @commial !!!

3 101 238 0 27

Brandon Falk @gamozolabs

3 years ago

High-performance QEMU tracing of all PCs and memory accesses (read/write + addr + size + value read/written). Capable of doing about 2 x86 cycles/MIPS instruction with full tracing. Here's a cool demo video of watching all memory accesses in real-time! youtube.com/watch?v=dYyjc2…