Pinned Tweet
It finally happened… I’ve been published on #Phrack! After more than five years since the last issue, #Phrack70 is out, featuring my article “Exploiting a Format String Bug in Solaris CDE”! I guess I can retire now 🐛
phrack.org/issues/70/13.html…
Replying to @kernelstub
this has been known for 20 years?
exploit-db.com/exploits/1518
cc @0xdea
raptor retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release provides new APIs and bug fixes. Thanks to new and existing contributors @mcbbugu, Amaan Qureshi, and @0xdea for their work on this release.
github.com/idalib-rs/idalib.…
raptor retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release adds compatibility with latest SDK (v9.4), and a couple of bug fixes. Thanks to @0xdea and @yeggorv for their contributions.
github.com/idalib-rs/idalib.…
raptor retweeted
If I wanted to scan C++ with semgrep I always used @0xdea‘s rules, and they just got an upgrade!
github.com/0xdea/semgrep-rul…
Our Technical Director @0xdea just shipped v2.0.0 of his #Semgrep C/C++ ruleset, now officially included in the @semgrep registry.
This release brings new detections, fewer false positives & better performance, all put to the test on real-world targets.
hnsecurity.it/blog/my-semgre…
raptor retweeted
Update from @0xdea on his semgrep rules set! I have been using his baseline repo for quite some time for automating binary analysis and often as a starting point for LLM enabled research.
Check out the latest here:
hnsecurity.it/blog/my-semgre…
raptor retweeted
Our Technical Director @0xdea just shipped v2.0.0 of his #Semgrep C/C++ ruleset, now officially included in the @semgrep registry.
This release brings new detections, fewer false positives & better performance, all put to the test on real-world targets.
hnsecurity.it/blog/my-semgre…
raptor retweeted
To wrap up #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance.
hnsecurity.it/blog/ai-report…
raptor retweeted
As part of #BurpExtensibilityMonth initiatives, last week our Research Lead and #BurpAmbassador
@apps3c gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Video, slides and code:
hnsecurity.it/blog/restoring…
raptor retweeted
#HNSecurity has brand new headquarters in #Turin!
A bigger space. A proper hacking lab, because our researchers deserve the right playground.
And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen. 👨🏻🍳
hnsecurity.it/
raptor retweeted
As part of #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c is joining @PortSwigger on @discord later today for “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Don’t miss it!
discord.com/events/115912411…
raptor retweeted
To kick off his collaboration with @PortSwigger as a Burp Suite Ambassador, our Research Lead @apps3c just published the 10th article on the creation of extensions for @Burp_Suite. Topic: Burp #AI!
hnsecurity.it/blog/extending…
raptor retweeted
[1] mariusmue.com/research/2025-… by @danielklischies @nSinusR @noopwafel et al.
[2] binarly.io/blog/another-crac… by @binarly_io
[3] evilsocket.net/2025/12/18/TP… by @evilsocket
[4] hnsecurity.it/blog/streamlin… by @0xdea
[5] zionbasque.com/files/papers/… by @mahal0z @AnantaSoneji @adamdoupe et al.
[6] onekey.com/resource/how-we-t… by @onekey_sec @qkaiser
raptor retweeted
happy new year 🚀
once again, I want to kick off the year by sharing some of my favorite firmware & low-level security research of 2025:
BaseBridge: Bridging the Gap between Over-The-Air and Emulation Testing for Cellular Baseband Firmware [1]
Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass [2]
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering [3]
Streamlining vulnerability research with IDA Pro and Rust [4]
An Empirical Study of Human–LLM Teaming in Software Reverse Engineering [5]
Understanding RTOS Firmware [6]
raptor retweeted
The wait is over! Phrack 72 40th Anniversary Edition is available now.
Order straight to your doorstep — the perfect gift for your fellow hacker, just in time for the holidays🎄
No need to go to rely on the warez scene with scans anymore😅
Order here: lulu.com/shop/phrack-zine/ph…
The PDF is also available online: archives.phrack.org/issues/7…
More at phrack.org/contact
#phrackat40 #phrack72
raptor retweeted
In this latest article in our long-running series on #BurpSuite #Extension #Development, @apps3c illustrates how to extend the Active and Passive Scanner in your favorite #WebApplication #PenetrationTesting tool with Custom Scan Checks:
hnsecurity.it/blog/extending…
Check it out!
raptor retweeted
This saved my life a few times.
Generally SAST for c++ needs to wrap around the compiler.
But sometimes you’re only sent a snippet to review. Nothing to build. In those cases, your best option is to use the illustrious @0xdea ‘s semgrep rules.
Hey developers and vulnerability researchers!
I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: github.com/0xdea/semgrep-rul…
Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.
Hey developers and vulnerability researchers!
I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: github.com/0xdea/semgrep-rul…
Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.
raptor retweeted
Our senior security analyst @0x_nope has published a follow-up to his popular #Groovy Template Engine #Exploitation writeup:
hnsecurity.it/blog/groovy-te…
Check out some new practical exploitation tricks that he figured out while working on a real-world scenario.
raptor retweeted
#Brida 0.6 is here! The bridge between #BurpSuite and #Frida is now fully compatible with Frida 17+.
For users who still rely on older Frida versions, Brida 0.6pre remains available on GitHub.
hnsecurity.it/blog/brida-0-6…
Coming soon to the BApp Store (pending approval).
raptor retweeted
Binary Golf Grand Prix 6 begins now!
#BGGP6 theme: "Recycle"

















