@InvokeReversing

Empowering you to take on today's toughest threats.

training.invokere.com
Joined January 2022
  • Tweets394
  • Following110
  • Followers2.8K
178Media
Learn how to reverse engineer malware: training.invokere.com/course… YouTube: youtube.com/@InvokeReversing Twitch: twitch.tv/invokereversing Mastodon: infosec.exchange/@invokereve… GitHub: github.com/invoke-re

Introduction to Malware Binary Triage (IDA Edition)

The introduction to Malware Binary Triage (IMBT) course provides a comprehensive overview of the malware binary triage process. This includes reverse engineering and malware analysis of real-world...

training.invokere.com
1
10
40
9,458
Come hang out while we do some detection engineering with Yara! twitch.tv/InvokeReversing

InvokeReversing - Twitch

We stream reverse engineering, software development and other fun things related to malware analysis. — InvokeReversing streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
1
3
10
938
Join us at 1PM EST today for a special Friday stream on detection engineering! twitch.tv/InvokeReversing
1
3
293
Invoke RE retweeted
herrcore
@herrcore
Sep 25
If you are doing #FlareOn this year and want to rank yourself against other 𝗵𝘂𝗺𝗮𝗻𝘀 we made an unofficial leaderboard. Honour system only, but it's something.
3
25
1
152
9,775
We've uploaded our stream from last Tuesday where we analyzed a Golang loader that uses vulnerable drivers to terminate EDR and antivirus processes before dropping Formbook. Enjoy!
2
10
52
1,955
Stream link: youtube.com/watch?v=Wz6ROkJ3…

Golang BYOVD Malware Loader and Vulnerable Driver Analysis (Stream -...

In this stream we analyze a Golang loader that drops and exploits d...

youtube.com
1
1
4
410
Join us at 2PM EST today to look at a mystery Golang sample pulling a BYOVD driver from GitHub 🕵️‍♂️ twitch.tv/invokereversing
1
4
11
556
Check out our new blog on breaking Efimer's infection chain with Frida: invokere.com/posts/2026/09/b… it includes details of follow-on payloads, using a known plaintext attack, a full extractor and detection rules.

Breaking Efimer’s Pyarmor Infection Chain with Frida

In the summer of 2026, Invoke RE began seeing the Efimer loader delivering a Pyarmor infection chain leading to a JavaScript clipper variant. We used the Frida dynamic instrumentation framework to...

invokere.com
8
22
984
Invoke RE retweeted
REcon
@reconmtl
Sep 4
Part of Recon 2026 video have been released recon.cx/2027/en/index.html on our youtube channel youtube.com/@reconmtl we are still waiting for confirmation from our speakers to release the rest.

REcon 2027 - Montreal Security Conference

REcon is a computer security conference with a focus on reverse engineering and advanced exploitation techniques.

recon.cx
1
27
73
7,675
We've uploaded our live stream from August 18th where we broke Pyarmor with Frida to recover JavaScript malware payloads, enjoy!
1
18
89
3,351
Stream link: youtube.com/watch?v=5jMK_g4k…

Breaking Efimer Loader with Frida (Stream - 18/08/2026)

In this stream we analyze the Efimer loader that is protected with ...

youtube.com
1
12
918
Had some fun with DeepSeek-V4-Flash-0731 while at the airport!

My 8¢ Malware Analyst

Article · @mrexodia
16
59
6
398
50,524
We've uploaded the materials from our 3 hour workshop presented at REcon 2026 titled "C++ Symbol and Type Recovery in Binary Ninja", you can find them here: github.com/Invoke-RE/worksho… If you're interested in learning advanced malware analysis techniques, check out our new Advanced Malware Binary Triage course here: training.invokere.com/course…
39
152
6,220
We're live! Let's break a malware loader that uses Pyarmor 9+ with Frida! twitch.tv/InvokeReversing

InvokeReversing - Twitch

We stream reverse engineering, software development and other fun things related to malware analysis. — InvokeReversing streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
1
5
22
1,339
Invoke RE retweeted
matteyeux@matteyeux
Aug 3
Today I am releasing the Binary Ninja Diffing plugin. It features Control flow graph, disassembly, LLIL, MLIL and HLIL diffing views. You can Save and restore diffs from the BNDB or json file. Supports porting function names from one binary to the other
9
40
3
436
18,240
We've uploaded our live stream from last Tuesday, where we analyzed a Rust loader sample with IDA Pro and RIFT that executes a Python loader, Donut loader shellcode and a Golang RAT. Enjoy!
2
18
167
6,455
Stream link: youtu.be/R2qgOTuio-g

Rust Loader Analysis with IDA Pro and RIFT (Stream - 21/07/2026)

In this stream we analyze a Rust loader in IDA Pro, that turns out ...

youtube.com
3
11
544
We're live! Come hang out while we look at a Rust infection chain that loads Python and Golang! twitch.tv/InvokeReversing

InvokeReversing - Twitch

We stream reverse engineering, software development and other fun things related to malware analysis. — InvokeReversing streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
7
15
1,774
Invoke RE retweeted
herrcore
@herrcore
Jul 19

Kimi K3 Reverse Engineering - Opus Without The Nagging

Article · @herrcore
20
158
12
962
182,009
Interested in virtual machine hardening? Invoke RE's intern Adam Krogsøe has been working on hardening techniques for the CAPEv2 sandbox, starting with the spoofing the PCI vendor ID that can be easily fingerprinted in QEMU. Check out his contribution here: github.com/kevoreilly/CAPEv2…
7
47
3,030
I have been seeing reverse engineering / malware analysis courses that cost thousands of dollars. Do you know you can actually learn that for free, right? There are also a bunch of other courses out there that are way cheaper or even free: - courses.0ffset.net/ - malwareanalysis-for-hedgehog… - invokere.com/ - github.com/RPISEC/MBE - guyinatuxedo.github.io/index… - openanalysis.net/ - p.ost2.fyi/ - taomm.org/

Zero2Automated

courses.0ffset.net
22
173
9
835
142,091
Load more