Artiphishell CEO | @ASU Sefcom PhD Student | @Shellphish Captain Emeritus | AIxCC Shellphish Team Lead | 日本語
Joined November 2021
- Tweets159
- Following271
- Followers610
- Likes653
Pinned Tweet
While playing @defcon CTF Finals with @shellphish I managed to solve the ICO challenge using LLMs (GPT5 + Cursor) and almost no human intervention. You can read how I did it here! wilgibbs.com/blog/defcon-fin…
Wil Gibbs retweeted
Earlier this year, we explored agentic vulnerability discovery across a diverse set of targets, such as Windows drivers, XNU, firmware, web apps, etc.
We share our experiences here:
arxiv.org/pdf/2610.14729
Fun fact: better decompilation can help reduce false positives!
Wil Gibbs retweeted
On October 28th, I'll be presenting at @unpromptedconf on Kuna (kuna.noelo.org), our agent-focused decompiler. I'll confront a central question: how can we make massive progress with LLMs in science while maintaining some insight?
See you on Day 2 at 10:45am, Stage 2 🎉
Wil Gibbs retweeted
All right, as many other researchers noticed too, responsible disclosure is becoming a bit of a circus and I think we need a change. Moving forward, we will be experimenting with a new model with a public disclosure ledger artiphishell.com/disclosure/. Godspeed.
Wil Gibbs retweeted
LLMs are changing the way we collaborate while reverse engineering. A new guest post by me for @HexRaysSA explores the idea, how it may shape decompilers, and how it shapes how we work together (humans and AI alike). Go check it out.
"In this new world of hacking, how do we optimize the way information is relayed and validated in an agent-human hacking environment?"
@mahal0z explores how LLMs killed the old decompiler-collaboration playbook — and what could replace it.
👉 Check out our latest guest blog: hex-rays.com/blog/llms-have-…
Wil Gibbs retweeted
I'd like to introduce Kuna, a new Rust-based decompiler that explores a highly experimental direction: self-refining decompiler development and usage. Or: a decompiler constantly improved by agents, made for agents.
Kuna rivals the best in structuring now. Let's talk about it.1/
Jay from our team found some cool variant bugs in the Linux kernel! (Also the blog name is pretty sick)
Just dropping some cool research for the kernel hackers out there to enjoy this weekend artiphishell.com/blog/bypass…
Wil Gibbs retweeted
We are approaching perfect binary decompilation, and, crazier still, LLMs may soon be the best decompilers on the planet. I'd like to introduce DecBench, an evaluation site to determine how close we are to completing the field of perfect decompilation.
Links and more in 🧵
Checkout our latest blog post on reproducing challenging Linux Kernel vulnerabilities that Syzbot’s AI system couldn’t!
Some fun insights on automatically triaging bugs for the Linux Kernel artiphishell.com/blog/vtriag…
Wil Gibbs retweeted
The Second Edition of SURE needs your work! Come show the community what advances you have in the space of understanding and reverse engineering software.
⏰Deadline approaching! We'd love to see your awesome work, so get it in by June 19th, 11:59 pm AoE.
sure26.hotcrp.com/
Wil Gibbs retweeted
Agents need better tools for reversing! I'm releasing declib (previously libbs), with a new CLI today that gives agents CLI access to 4 decompilers (IDA, Ghidra, Binja, angr), parity feature support to most MCP (12 features), and the ability to sync those changes across decs!
Wil Gibbs retweeted
For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!
Interested? 🧵👇
Wil Gibbs retweeted
We are thrilled to announce that the workshop on Software Understanding and Reverse Engineering (SURE) is back for its second iteration, co-located with ACM CCS in The Hague!
We invite the community to submit their research to SURE:
sure-workshop.org/cfp/
Wil Gibbs retweeted
This Fall, I’m joining the University of Georgia as an Assistant Professor!
I want to push on the fundamentals of software reverse engineering, from decompilation to how humans actually understand code.
I’m looking for PhD students, collaborators, and sponsors. More below.
Wil Gibbs retweeted
In this episode @adamdoupe and @Zardus chat with THE @LtFish_ from @shellphish and @angrdothorse about CTF origins, why reversing still matters, the angr decompiler, and how LLMs may change RE workflows (recorded in October 2025, so OLD views).
It’s was a crazy Journey through @DARPA’s AIxCC and now using what we’ve learned, we’re trying to ease the flood caused by the vulnpocolypse at Artiphishell! Alongside my amazing cofounders @degrigis @dreselli @_saadullah01 @jay_vadayath /🧵
Cybersecurity teams face thousands of alerts a day but only a few pose real risk. #SCAI doctoral student @cl4sm turned his #AI research into Artiphishell, a $1.5M startup that cuts through alert overload and proves which vulnerabilities matter.
news.engineering.asu.edu/202…
You can find us at artiphishell.com!
Wil Gibbs retweeted
Cybersecurity teams face thousands of alerts a day but only a few pose real risk. #SCAI doctoral student @cl4sm turned his #AI research into Artiphishell, a $1.5M startup that cuts through alert overload and proves which vulnerabilities matter.
news.engineering.asu.edu/202…
Wil Gibbs retweeted
Breaking news from NDSS26: it seems that we have won a Distinguished Paper Award for "Decompiling the Synergy: An Empirical Study of Human-LLM Teaming in Software Reverse Engineering"
A giant thank you to my amazing co-authors and everyone who participated in the experiment!
Wil Gibbs retweeted
UPDATE: our work won a best paper award 🏆 @NDSSSymposium! Check out our work on establishing the first measurements for understanding how LLMs are changing reverse engineering.
Shout out to the whole team from @SCAI_ASU, @EURECOM, and @UniPadova
Do LLMs actually help hackers reverse engineer and understand the software they want to exploit?
We ran the first fine-grained human study of LLMs + reverse engineering.
To appear at NDSS 2026.
Interested? Some quick findings in 🧵👇
Paper: zionbasque.com/files/papers/…
Wil Gibbs retweeted
Something else we have been working on, "vTriage: A platform for verified-ai-triaging".
***Cybersecurity CANNOT BE vibed end-to-end***
We MUST raise the bar, or the industry risks moving backward. Do not settle for “vibe-triage.”
Interested? [email protected]
