@Coldzer0x0

Co-Founder @ XENOM-X LLC | Senior Offensive security engineer @EG_CERT { Opinions are my own }🦠

 Coldzer0#0000
github.com/Coldzer0
Joined March 2013
  • Tweets71
  • Following394
  • Followers1.2K
11Media
github.com/Coldzer0/LuaDecom… Lua disassembler and decompiler for Lua 5.1, 5.2, 5.3, 5.4, and 5.5 😎 Check the examples github.com/Coldzer0/LuaDecom… #lua #decompiler #analysis

GitHub - Coldzer0/LuaDecompiler: Lua bytecode disassembler and decompiler for Lua 5.1, 5.2, 5.3,...

Lua bytecode disassembler and decompiler for Lua 5.1, 5.2, 5.3, 5.4, and 5.5 binary chunks. - Coldzer0/LuaDecompiler

github.com
5
13
1,006
A little something I was working on for the RE community. Still in beta ^_^ reverse4.fun #Free #reverse #interactive #roadmaps

RE4F Labs

Interactive reverse-engineering roadmaps in Arabic and English: maps, labs, checks and progress.

reverse4.fun
3
12
1
47
1,801
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now. back.engineering/blog/31/07/…
3
94
1
507
27,767

Dodge this$0

Article · @bot59751939
4
16
4
141
43,473
Coldzer0 retweeted
Sam Thomas
@xorpseMar 7
We @binarly_io just open-sourced our VulHunt framework at @REverseConf! GitHub: github.com/vulhunt-re/vulhun… Documentation: vulhunt.re/docs Slack: join.slack.com/t/vulhunt/sha… vulhunt.re

GitHub - vulhunt-re/vulhunt: Vulnerability detection framework by Binarly's REsearch team

Vulnerability detection framework by Binarly's REsearch team - vulhunt-re/vulhunt

github.com
2
41
3
170
24,217
Coldzer0 retweeted
rev.ng
@_revngFeb 27
🎥 QEMU Dev Starter guide, Part 1 The QEMU codebase can be quite daunting for new developers, Anton with this talk aims to give an overview of both the major APIs one might encounter as well as the high control flow of user-mode emulation.
2
66
1
339
22,021
I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🪲 Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA: github.com/diversenok/DiaSym…
A screenshot of DiaSymbolView inspecting combase.pdb

ALT A screenshot of DiaSymbolView inspecting combase.pdb

3
55
186
15,262
We at @emproofsecurity open-sourced a free firmware reverse engineering workshop for self-study. Topics: ELF analysis, cracking, malware triage, embedded-Linux, bare-metal, crypto-key extraction, anti-analysis. Docker setup and solutions included. github.com/emproof-com/works…

GitHub - emproof-com/workshop_firmware_reverse_engineering: Workshop on firmware reverse engineering

Workshop on firmware reverse engineering. Contribute to emproof-com/workshop_firmware_reverse_engineering development by creating an account on GitHub.

github.com
83
1
315
20,851
"Here's a link to my github so you can see what kind of programmer I am" seldom fails...
57
11
6
659
92,568
Coldzer0 retweeted
ö@r0keb11 Aug 2025
Good Morning! Just published a blog post analyzing Hyper-V functionality, design, and key binaries, hvix64.exe (hypervisor), securekernel.exe (secure kernel), and winload.dll (boot-time loader and CPU check). r0keb.github.io/posts/Hyper-…

Hyper-V Research

Good morning! In today’s blog I’m going to introduce one of my favorite topics in all of computer science, programming, and low-level computing, hypervisors. In this case, the Windows hypervisor,...

r0keb.github.io
6
85
1
280
18,599
Coldzer0 retweeted
x64dbg@x64dbg30 Jun 2025
We're excited to announce a major new release of x64dbg! The main new feature is support for bitfields, enums and anonymous types, which allows all types in the Windows SDK to be represented and displayed 🔥
12
251
5
1,412
78,446
The slides from our @reconmtl talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolodev), are now online! Slides: synthesis.to/presentations/r… Plugin: github.com/mrphrazer/obfusca…
1
48
1
146
20,049
Added support for newer Delphi versions and IDA 9.x github.com/Coldzer0/IDA-For-… #IDA #IDA_For_Delphi #ReverseEngineering

GitHub - Coldzer0/IDA-For-Delphi: IDA Python Script to Get All function names from Event Construc...

IDA Python Script to Get All function names from Event Constructor (VCL) - Coldzer0/IDA-For-Delphi

github.com
2
21
98
8,967
My new article, "Writing a Full Windows ARM64 Debugger for Reverse Engineering," covers the topic in detail, including its internals and the core differences between Windows on Intel and ARM64: keowu.re/posts/Writing-a-Win…

Keowu Blog's

Security Researcher | i like All OS Internals, Malware & Reverse Engineering, C++, Intel/ARM Assembly and cool things.

keowu.re
4
83
3
262
23,289
Coldzer0 retweeted
herm1t@vx_herm1t2 Apr 2025
My old/new blog herm1tvx.blogspot.com
4
6
38
14,066
Had a lot of fun digging into COM stuff with @bohops recently! We ended up finding a way to laterally move without dropping a file. ibm.com/think/news/fileless-…

Fileless lateral movement with trapped COM objects | IBM

New research from IBM X-Force Red has led to the development of a proof-of-concept fileless lateral movement technique by abusing trapped Component Object Model (COM) objects. Get the details.

ibm.com
11
174
6
518
77,146
I updated PyClassInformer to add several new features such as auto-renaming virtual methods, detecting user-defined classes, detecting possible constructors and destructors, tree-based widget to display class-related information and so on. github.com/herosi/PyClassInf…
Hiroshi Suzuki@herosi_t27 Feb 2025
I've released a new tool "PyClassInformer". It detects vftables in a program compiled with MSVC++ by parsing RTTI. It is written in pure python. So, it runs on MacOS and Linux as well as Windows. #cpp, #vftable, #RTTI, #IDA, #IDAPython, #ReverseEngineering github.com/herosi/PyClassInf…

GitHub - herosi/PyClassInformer

Contribute to herosi/PyClassInformer development by creating an account on GitHub.

github.com
1
27
96
17,051
Bytecode Reuse Attack (Part 4) : lolcads.github.io/posts/2024… Bytecode Injection (Part 3) : lolcads.github.io/posts/2024… Fundamentals for Bytecode Exploitation (Part 2) : lolcads.github.io/posts/2024… Introduction to Android Bytecode Exploitation (Part 1) : lolcads.github.io/posts/2024…
49
159
12,629
New blog post on my primary english blog: "Why Object Pascal is More Than Meets the Eye: Exploring the Power and Versatility of Delphi and FreePascal" blog.rosseaux.net/post/a346c… @freepascaldev @EmbarcaderoTech @SciPasTips
1
3
21
1,073
Coldzer0 retweeted
Pavel@sadreck11 Jan 2023
Codecepticon v1.1.0 just released! You can now: 👉Generate certificates and... 👉...sign executables, in order to... 👉...bypass even more AVs with one simple trick! github.com/Accenture/Codecep…

GitHub - Accenture/Codecepticon: .NET/PowerShell/VBA Offensive Security Obfuscator

.NET/PowerShell/VBA Offensive Security Obfuscator. Contribute to Accenture/Codecepticon development by creating an account on GitHub.

github.com
1
52
134
14,038
Load more