Binary Wizards: security, reverse engineering, programming, AI and more.
USA
Joined March 2023
- Tweets620
- Following584
- Followers5.2K
- Likes1.3K
Pinned Tweet
Friends, @allthingsida was a fun experiment while it lasted.
The account is now parked and links to @BinaryWizards.
The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel:
youtube.com/@binary-wizards
I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella.
Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.
r2sql is now maintained under @radareorg as r2xsql. I will find time to make a quick introductory video as well!
I've been happily and productively collaborating with @radareorg and the team for a while now, and I'm excited to announce that **r2xsql is finally live!**
R2 was already incredibly feature-rich and AI-friendly, but now you can also let your AI agents interact with R2 databases using SQL queries compatible with the xSQL family (like IDASQL, GhidraSQL and Binary Ninja SQL)
github.com/radareorg/r2xsql/
Huge thanks to @radareorg and the team for this opportunity!
I made a bunch of videos on IDASQL but still I get asked: what’s the difference between it and IDA MCP and that if it does not have the word “MCP” in it then it must be some slop or something ;)
Maybe I should put IDASQL and IDA MCP side by side and post the results ;)
13 seconds.
It will help dispel the misconception about IDASQL and show its true power and flexibility.
Some folks, if they don’t see the word “MCP”, they become so dismissive. :(
And hey, if you don’t like IDA, GhidraSQL is equally powerful and we’ll maintained. Just give it to your AI agent and go touch grass. It just works ;)
If you still use Windows Explorer, then it is time to use something better, faster and open source!
Sally File Manager now has its own website! Stay tuned for more updates.
sally-filemanager.app
Finally got some time to implement deep links in IDASQL. A few more unrelated bug fixes and features and 0.0.19 will be out.
ALT List the called functions from “start” only 5 levels deep.
ghidrasql 0.0.7 is out: control Ghidra's auto-analysis from SQL.
UPDATE program_options to turn analyzers off, INSERT INTO analysis_passes to re-run analysis, DELETE to cancel it. Or skip slow analyzers at import with --analyzers-off.
github.com/0xeb/ghidrasql/re…
Under the hood: libghidra 0.0.8 adds program options, transaction history and cancellable analysis jobs to its C++, Python and Rust clients. The ghidrasql agent skills are updated to match.
github.com/0xeb/libghidra/re…
The @reconmtl talk "SELECT * FROM binary - Vibe Reverse Engineering with IDA, Ghidra and Binary Ninja" is out.
youtube.com/watch?v=ADPoD7-_…
But if you want a deep dive, here's a dedicated IDASQL tutorial: youtube.com/watch?v=OSfuKLWM…
Vibe Reverse Engineering #2: GhidraSQL, all you need to know!
Multiple binaries at once, type recovery, source recovery back to disk, database annotation, headless workflows, and a few real Windows security research scenarios.
youtube.com/watch?v=ceSd1-j-…
For the Windows research examples, I use kernel drivers, vulnerable drivers, and at one point casually pick the Windows hypervisor with basically no prior knowledge just to see how far the workflow can take it.
And yes, there is a frontier-model rant in there too.
GhidraSQL 0.0.4 is out with tons of bug fixes
github.com/0xeb/ghidrasql
And this was drawn to my attention: reddit.com/r/ProgrammerHumor…
Look ma, I am infamous now :)
They got triggered by the 'Let the AI install it for you'. Oh well, maybe in a few years they will catch up. For now, I am amused by their anger ;)
