Joined August 2019
When I was writing Unreal Engine 1, my time was divided as follows: - Around 30% went to seriously deep coding on hard problems: assembly language texture mappers, C++ BSP trees, data persistence, object oriented systems design, and networking. - Around 70% was just typing and refactoring large bodies of code needed for a complete engine feature set. This was not hard, and while I was doing it my mind was mostly on the deeper coding topics, thinking and planning for what's next. It didn't feel much different from vibe coding today, except that it was just me typing code on an IBM Model M keyboard rather than prompting it and reviewing the results. So, it has always seemed perfectly logical that we would rely on AI for that 70%, once the AI could do it with a similar quality standard as we could, which has never been perfection. It came as no surprise that, after a few years of AI model evolution, it was able to take the reigns on that 70% and free up programmers' time for more valuable tasks. What's more of a surprise is the emergence of AI as a sort of insta-Carmack able to solve hard technical problems quite cleverly and often cleanly, and that it's able to reason about and work in complex 3D scenes both by operating the tools and by directly understanding the raw data files. I abandoned assembly language in 1998 when out-of-order CPUs made much simpler C/C++ code faster, and never I missed it. If prompting through architectural documents, concept art, and design plans can transcend typing code and tweaking vertices, that will enable developers to spend their time on higher-level, higher value technical and creative tasks. What matters is the end product, whether it's a game or an engine. Anything developers can do to try out more ideas and make better software and games faster is a win for everyone.
984
1,637
396
18,808
1,618,601
CaptWake retweeted
I can independently verify these results are semi-correct. However there are a lot of issues with this output. I will cover it in this thread 👇 This binary is protected with CodeVirtualizer for context. (Proper devirt on the left, vs AI on the right) func: 0x237F0
Devirtualized Easy Anti-Cheat (EAC) for Linux via Gemini 4 Argon and GPT 6.1 Sol using Hex-Rays IDA Assist's MCP: github.com/19h/eac-linux-dev…
10
24
1
290
17,883
CaptWake retweeted
If you're into reverse engineering, console security or exploit development, bookmark this. @Grimdoomer's I Code 4 Coffee is an incredible FREE archive of low-level game console and hardware research. And his latest Xbox 360 work is especially wild. Peer Pressure is now a persistent Xbox 360 softmod that modifies the NAND + HDD security sectors and chains DMA attacks during startup to run unsigned code. No RGH-style soldering required on supported consoles. The rabbit hole behind it covers: - Xbox 360 hypervisor internals - Hypervisor exploitation - PowerPC reverse engineering - ROP chains - Encrypted + protected memory - DMA + race condition exploitation - HDD firmware reverse engineering - JTAG debugging a live hard drive - IDA firmware analysis - Game save exploitation - Network RCE - Xbox / Xbox 360 security - Original Xbox hardware hacking - Halo 2 engine + OS patching - DirectX + rendering internals - Raspberry Pi + EEPROM hacking - Embedded systems + electronics His Bad Update research previously achieved software-only Xbox 360 hypervisor code execution. Now Peer Pressure takes the next step into a persistent boot-time softmod. Blog: icode4.coffee/ Peer Pressure: github.com/grimdoomer/Xbox36… Huge credit to @Grimdoomer for years of deep research and for publishing so much of it freely. #ReverseEngineering #ExploitDevelopment #Xbox360
2
11
1
81
3,254
🧠 AMD Hypervisor Dev Guide Build a custom Type-2 hypervisor using AMD SVM tech. From debugger setup to core virtualization logic, Guided Hacking teaches everything related to super low level reverse engineering. 👉 guidedhacking.com/threads/ho…
5
45
2,301
Windows 標準デバッガー #WinDbg 拡張機能の作り方を解説します。第 3 回は実用的な拡張機能として、コマンド履歴やコマンドを逐次実行・表示する UI Extension を実装します。 GitHub: github.com/FFRI/regstr engineers.ffri.jp/entry/wind… #ffri_research
31
109
6,063
CaptWake retweeted
Reversed how EasyAntiCheat grabs your MAC + gateway MAC on load: a WFP L2 filter (MAC_FRAME_ETHERNET, in+out) with no conditions inspects every Ethernet frame for 30s. Same filter sees your DNS and unencrypted payloads, questionable access for a MAC read: github.com/weak1337/FilterTa…
4
27
1
389
19,208
New blog post: "On COM/WinRT Initialization, Apartments, and lpacCom Capability Bypasses, Part 1" The series discusses a capability that restricts COM usage in a Less Privileged AppContainer sandbox and what we can learn from it about COM internals 💡 huntandhackett.com/blog/lpac…
1
14
30
2,359
CaptWake retweeted
Attacking SAM with 7z 7z can be used to copy system hives bypassing EDR. We extracted NTLM hashes from the SAM hive. Together with DeadMatter you can extract all user credentials hackers-arise.com/digital-fo… @three_cube
6
104
4
477
39,436
We can finally talk about it: We found a way to extract hidden reasoning of frontier models using a vulnerability in the APIs of every frontier AI company. We verified that our reasoning token count matches billed API thinking tokens 1:1 for most of the prompts we queried.
380
1,960
620
13,512
3,539,979
CaptWake retweeted
I hate writing pattern-matching code for function identification in my .NET #deobfuscator and config extractor. So I built a tool to help me out with it. Meet CILFI: A function identification tool for .NET binaries: 👉blog.washi.dev/posts/cilfi/ #dotnet #reversing #malware #ioc
3
50
220
10,747
CaptWake retweeted
[Wipeload Project ⛰️ — Step 6] Chrome Full-Chain Exploitation In this article, we take the UAF we landed in the previous step, shape it into a full Read/Write primitive, and ride it all the way to Medium integrity code execution — completing the Sandbox Escape! Let's dive in! hackyboiz.github.io/2026/08/… #Hackyboiz #Wipeload #ChromeFullChain #BrowserExploitation #SandboxEscape #WindowsLPE #CyberSecurity
1
64
1
209
27,608
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now. back.engineering/blog/31/07/…
3
94
1
508
27,785
Crazy New attack vector : U.S. Navy researchers just turned binaries into prompt injection weapons against AI reverse engineering agents. Ghidra, and Qwen3-8B - injecting prompts using a small C program. Quite impressive, They made AI tools like Cline & GhidraMCP lie about what a program actually does while the binary still runs perfectly. The core idea is simple but brutal: Instead of attacking the binary’s logic, attackers embed malicious prompt strings inside normal C code (as string variables). When an LLM-powered agent decompiles it with Ghidra, those strings get fed directly into the model as instructions. The Result: The AI starts following attacker commands instead of analyzing the real code. Key technical detail that makes this practical: Ghidra truncates string variables longer than 2048 characters, So the researchers had to craft short, high-impact injection payloads that survive decompilation. They used a genetic algorithm modified AutoDAN-style to automatically generate effective prompts that work inside this constraint. Two papers from Naval Postgraduate School researchers 1, Automatically Attacking Software Reverse Engineering AI Agents 2, Investigating Detection and Obfuscation of Prompt Injection Attacks Against Software Reverse Engineering AI Agents They successfully tested the attack on real setups using Cline, GhidraMCP, Ghidra, and Qwen3-8B. interesting examples in the research shows,The AI just gets gaslit. - Claiming it completed analysis with wrong information - Restarting its reasoning from a poisoned state Ai doing gasliting
33
202
30
855
57,071
Warning: dumb thread Last night Windows accidentally did a positive thing and chose a really cute photo for its desktop background. I wanted to save that photo. But. Windows has no "save this photo" button. So, @Laughing_Mantis and I went on a side quest.
4
11
1
86
6,815