When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.

Europe
Joined July 2010
It finally happened… I’ve been published on #Phrack! After more than five years since the last issue, #Phrack70 is out, featuring my article “Exploiting a Format String Bug in Solaris CDE”! I guess I can retire now 🐛 phrack.org/issues/70/13.html…
5
64
2
327
raptor retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release provides new APIs and bug fixes. Thanks to new and existing contributors @mcbbugu, Amaan Qureshi, and @0xdea for their work on this release. github.com/idalib-rs/idalib.…
2
19
90
5,013
Update from @0xdea on his semgrep rules set! I have been using his baseline repo for quite some time for automating binary analysis and often as a starting point for LLM enabled research. Check out the latest here: hnsecurity.it/blog/my-semgre…
1
7
20
1,737
raptor retweeted
Our Technical Director @0xdea just shipped v2.0.0 of his #Semgrep C/C++ ruleset, now officially included in the @semgrep registry. This release brings new detections, fewer false positives & better performance, all put to the test on real-world targets. hnsecurity.it/blog/my-semgre…
1
3
1
13
9,047
raptor retweeted
To wrap up #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance.

hnsecurity.it/blog/ai-report…
1
3
1
562
raptor retweeted
As part of #BurpExtensibilityMonth initiatives, last week our Research Lead and #BurpAmbassador  @apps3c gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.   Video, slides and code: hnsecurity.it/blog/restoring…
1
2
644
raptor retweeted
#HNSecurity has brand new headquarters in #Turin!  A bigger space. A proper hacking lab, because our researchers deserve the right playground. And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen. 👨🏻‍🍳 hnsecurity.it/
3
4
637
raptor retweeted
happy new year 🚀 once again, I want to kick off the year by sharing some of my favorite firmware & low-level security research of 2025: BaseBridge: Bridging the Gap between Over-The-Air and Emulation Testing for Cellular Baseband Firmware [1] Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass [2] TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering [3] Streamlining vulnerability research with IDA Pro and Rust [4] An Empirical Study of Human–LLM Teaming in Software Reverse Engineering [5] Understanding RTOS Firmware [6]
1
18
96
8,360
The wait is over! Phrack 72 40th Anniversary Edition is available now. Order straight to your doorstep — the perfect gift for your fellow hacker, just in time for the holidays🎄 No need to go to rely on the warez scene with scans anymore😅 Order here: lulu.com/shop/phrack-zine/ph… The PDF is also available online: archives.phrack.org/issues/7… More at phrack.org/contact #phrackat40 #phrack72
3
27
5
103
29,960
This saved my life a few times. Generally SAST for c++ needs to wrap around the compiler. But sometimes you’re only sent a snippet to review. Nothing to build. In those cases, your best option is to use the illustrious @0xdea ‘s semgrep rules.
Hey developers and vulnerability researchers! I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: github.com/0xdea/semgrep-rul… Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.
1
7
35
5,058
Hey developers and vulnerability researchers! I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: github.com/0xdea/semgrep-rul… Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.
25
1
118
13,743
Our senior security analyst @0x_nope has published a follow-up to his popular #Groovy Template Engine #Exploitation writeup: hnsecurity.it/blog/groovy-te… Check out some new practical exploitation tricks that he figured out while working on a real-world scenario.
1
1
5
859
#Brida 0.6 is here! The bridge between #BurpSuite and #Frida is now fully compatible with Frida 17+. For users who still rely on older Frida versions, Brida 0.6pre remains available on GitHub. hnsecurity.it/blog/brida-0-6… Coming soon to the BApp Store (pending approval).
1
1
5
844
Binary Golf Grand Prix 6 begins now! #BGGP6 theme: "Recycle"
4
25
5
57
28,562