⚙️Polymorphic & Metamorphic engines, 🛡 Binary & source code obfuscation, Software protection, Reversing, Radio unlock codes, Social Media marketing

Delaware
Joined June 2015
Pinned Tweet
#PowerShell Pro Obfuscator & Virtualizer ✔️Advanced obfuscations ✔️Virtualization ✔️Finite-state automata ✔️Self-defending against decompilation ✔️Anti-debugging ✔️Decoys ✔️API for #csharp #rust #python #js #php ✔️Win / Lin UI & CLI pelock.com/powershell-pro-ob… #redteam #hacking
4
8
83
4,116
Slopware Rust AI idiots don't even test it once on Windows, it's so broken it's unusable, with some weird empty spaces, all controls are broken, you click one and the next one gets clicked... #slopware #solidcraft #ai #rust
SolidCraft 0.17 is out ⚡ solidcraft.io Much faster for big designs: - Reopening a saved design takes seconds, not minutes - Large STEP assemblies import in about a minute - No more "Not responding" while opening or saving - Moving parts in big assemblies is near instant Also new: - Loft guide rails and two-sided extrudes through all - Mouse gestures: a ring of tools on the right button - Danish, Vietnamese & Malay translations - 78 bug fixes across modelling, STEP & sheet metal 232 changes from 61 contributors. Thank you!
1
94
Dziś wydaję silnik basal 2.2 🇵🇱 z autokalibracją - model sam uczy się na Waszych prywatnych danych 🤯 Model decyzyjny jest użyteczny tylko wtedy, gdy „90% pewności” znaczy 90% na Twoich danych. Kalibrację dostarczaną z modelami dopasowaliśmy na naszych danych. Na Twoich model może być pewny siebie inaczej, nawet gdy jest równie trafny. Dlatego w 2.2 wprowadzam coś co pozwoli ustawić kalibrację na Twoich danych - basal-calibrate. Bierzesz oznaczone przykłady ze swojego procesu i najpierw generujesz raport. Potem narzędzie dopasowuje kalibrację i wyznacza certyfikowane progi dla Twoich lokalnych danych 🤯. Bez udostępniania danych na zewnątrz, bez trenowania. Basal sam się skalibruje. Sprawdziłem to na nowej dziedzinie, na której model nie był trenowany. Ustawienie „1%” z dostarczonego pliku przyjęłoby automatycznie co ósmą decyzję, a 8% z nich byłoby błędnych. Po kalibracji na danych użytkownika błąd kalibracji pytań choice spadł z 0,268 do 0,083. Na twierdzeniach verify model przyjął automatycznie 54,8% przypadków bez żadnego błędu. W tym wydaniu także: 🔸 porty FP8 (vLLM) i GGUF (llama.cpp, Ollama) dla basal-omni-1.0-mini i max, 🔸 porty MLX dla Maca z Apple Silicon: mini, max i 1.1-max, 🔸 wkłady społeczności. Dziękuję: - Piotr Durlej (eksport GGUF) @pdurlej - super, pomogło mi zoptymalizować eksporty do GGUF - Kuba Sołtys (Google TPU) @QoobaSol - świetna implementacja na TPU - Michał Kardyś (AMD Strix Halo) - dziękuję bardzo bo już nie miałem możliwości by się tym zając (sprawdziłem u mnie i działa świetnie) @kardysm - lukaspoloki (basal-viz, podgląd każdego kroku decyzji). - Paweł Kiszczak - eksporty do AppleSilicon MLX Podziękowania za cały weekend bardzo miłych wpisów, liczne komentarze opublikuję dzisiaj wieczorem. Ile wystarczyło czasu to odpisałem. Później już pracowałem nad kolejnymi usprawnieniami. Dzisiaj czytam kolejne wpisy. Dziękuję.
43
118
8
1,359
32,795
Lua Virtualizer - advanced Lua virtualizer (VM, FSM, WEAVE). Online interface, desktop, CLI, API, VSCode/VSX extensions, decorators. pelock.com/lua-virtualizer/ #lua #programming #virtualizer #obfuscator #programming #modding #roblox #wow #dota #factorio #civilization #payday #hack
1
4
61
3,245
Pursue Your Passions
303
880
165
8,369
672,247
Despite claims by Trezor today that none of its crypto devices have been compromised - unlike the devices of Ledger, its competitor - hardware hacker @joegrand says he found implants in two Trezor devices and reported this to Trezor in August. My story: zetter-zeroday.com/trezor-wa…
10
14
6
65
17,528
125 numer "Programisty" wylądował w Empikach. Spis treści: programistamag.pl/programist…
2
2
4
117
PELock retweeted
Wrote up my attempt at deobfuscating Luraph-protected Lua: lifting Lua to LLVM IR , then using AI + partial evaluation to strip the VM, and checking it against the original. nac-l.github.io/2026/10/12/d…
2
31
2
151
7,212
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users. I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet). The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries). My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold. Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk. I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it. If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
704
1,985
668
11,456
2,082,844
PELock retweeted
The Phrack 73 prophile of @halvarflake A must-read from one of the legends of vulnerability research. archives.phrack.org/dl/73/ha…
3
74
2
299
19,371
PELock retweeted
I have discovered $50 amazon photo frames to be the PERFECT home display screen They can be rooted, updated to run a modern browser, have WiFi and can be powered from USB 1280×800 resolution with a nice touch screen I detailed how to hack these yourself in my latest video wesbos.com/hacking-smart-pho…
390
453
212
10,287
1,813,821
Ok, preparing to release IDASQL 0.0.19. Here's deep links being tested in Linux with Claude Code. Click on a link in your terminal and IDA's focused.
2
1
13
4,801
Obok ANS, niedawna metoda @marcinzukowski (PivCo) zaczyna być wdrażana dla znacznego przyspieszenia dekodowania – od miesiąca domyślna w OpenZL Mety, też z ANS w wersji PHA. Szczegóły w uaktualnionym raporcie użycia ANS: zenodo.org/records/23231938
2
15
91
3,637
AI Cloning should be illegal. And I think it might be. It feels self-evident, but we may need to wait for the courts to be sure. This morning, I took a full Windows application from Microsoft, had AI reverse-engineer it using NSA's Ghidra into a set of atomicizable actions, then translated those actions backward into Rust logic, then compiled the Rust into a brand new application. And it did it. In one shot. So the process is: C Code -> Compiler -> Linker -> Exe then Exe -> OPS -> Rust -> Compiler -> Linker -> Exe So you feed it an application, and it produces a Rust version of that same application with 100% of the same functionality and appearance and "none" of the original code - just the logic behind that code. I don't consider this coding. It's not even vibe coding. It is piracy. This might be a hot take, but cloning an application when the application itself is used as an input does NOT, in my mind, yield an independent work. I'm even dubious about letting the AI base its work on the application. I specifically did NOT do so for TMOG (tmog.org) because I didn't want it just copying. So I wrote a huge spec instead (which I guess could just be copying via indirection, but I'll leave that aside for now). This time, I chose an in-the-box Windows application as a proof of concept, but there's no reason this couldn't be applied to Photoshop. Or heck, have the AI port Final Cut from the Mac to Windows. That's a bigger ask, of course, but we're not far from it. And so I propose we ruthlessly distinguish any process that uses an application binary itself. Prompt -> Code -> Binary == OK Binary -> Prompt -> Code => Binary == Clone
756
140
124
1,488
179,459
JPEG XL turned on by default has just started shipping in Chrome 155 - after ~30 years officially replacing JPEG for the next decades, ~2x reducing web sizes, adding HDR, transparency, progressive decoding for much faster www, also animations, lossless - should retire also ancient GIF, PNG, TIFF - finally reaching universality and much better compression. developer.chrome.com/blog/jp…
14
58
7
441
37,117
PELock retweeted
Avast sold your browsing history while telling you it was protecting your privacy. for six years. Avast antivirus and browser extensions collected URLs, search queries, timestamps, and cookie data from hundreds of millions of users. the pitch: we protect you from online tracking. Behind the scenes: Avast ran a subsidiary called Jumpshot. Jumpshot packaged that browsing data and sold it to over 100 third parties, advertising companies, marketing firms, data brokers, investment companies. The data included every webpage you visited, exact timestamps, device and browser type, city, state, country and a unique persistent device identifier attached to your profile. Avast said it anonymized the data before selling it. the FTC said that was false, the identifier allowed buyers to trace specific individuals across every website they visited over time. 8 petabytes of browsing data accumulated by 2020. before 2018 Avast didn't mention any of this in its privacy policy at all. The FTC fined them $16.5 million in 2024. Avast called it "resolving its investigation of past provisions." they shut down Jumpshot in 2020 after Motherboard first reported it. $16.5 million is roughly what Avast made selling your data in a single quarter. the antivirus watching your traffic to protect you from trackers was the tracker 😂.
20
232
17
1,147
258,717
Today we’re soft launching BitBender, a SaaS for automated binary deobfuscation: unpacking, import fixing, OEP restore, and related prep. IDA and Binja MCP are powerful, but packed or obfuscated samples still bog down LLM analysis. BitBender is meant to clear that layer first. Early beta. If you want access, get in touch: bitbender.io
9
19
108
5,986
PELock retweeted
C isn’t dead; it’s evolving. > this book shows how to write clean, safe, and powerful code with today’s standards. > perfect for systems programmers, embedded devs, and anyone who wants to master the language that still runs the world
12
85
2
831
19,355
5
13
116
6,772
Yo @rahulgchaudhary can we get some love? :)
51
watched the video and he even knows about stealing the reasoning traces study😂
PEWDIEPIE led this distillation campaign from his japanese accounts?😂
50
483
68
13,066
1,634,847