Joined October 2009
PPEE 1.16 is out! - Hex editor improved with context menu, Highlighting, Copy & Paste, Find - Follow in Hex editor, menu item is active now - Editable combo-box added for bitfields - Keyboard shortcuts revised >> RT please << Download: mzrst.com
1
66
PPEE (puppy) 1.14 is released - Added new Search box for bottom listview - Added section names in Strings and Data dirs - List of TLS callbacks - #Reproducible build hash support - More info about sections - Rich Header parsing improved #Malware #DFIR Https://mzrst.com
1
3
8
577
Just launched shimindex.info - a searchable index of Windows application compatibility shims. Ever wondered why an old app magically works on a new Windows version? These shims are the invisible patches doing the work. Browse ~115k of them across Windows versions.
1
9
26
1,650
Mark Jansen retweeted
#ReactOS now has a Certificate Manager! Courtesy of our developer @learn_more.
4
22
1
314
9,072
Mark Jansen retweeted
Longplay of Serious Sam on real hardware. 2560x1440p, 4x Multisample AA, 16x Anisotropic Filtering. All achieved with #ReactOS!!! Watch the test by @AotoriHibiki here: youtu.be/7PNlxHqw-bA
4
13
1
88
4,569
Mark Jansen retweeted
Today marks 30th year of #ReactOS. Happy Birthday ReactOS! We would like to thank everyone for supporting us along our long journey of building a Windows-compatible, free and open source OS! Read our 30th year blog post here: reactos.org/blogs/30yrs-of-r…
9
38
7
241
10,870
Mark Jansen retweeted
Starting 2026 with a new blog! I've really been enjoying my Windows on ARM machine - so my post is about interrupts for WoA. This includes x64/ARM differences, virtual interrupts, Hyper-V's synthetic controller, and Secure Kernel interrupts/intercepts connormcgarr.github.io/windo…
7
73
1
291
31,103
Mark Jansen retweeted
New year present from Timo! After months of preparatory work, MSVCRT in #ReactOS has just been synced with Wine-10.0! Overall 30% decrease in API test failures, newly working/improved apps and... Another major step for NT6 compatibility bringup achieved!!!
4
23
3
160
16,574
Mark Jansen retweeted
Unexpected experiment, volume 1:
The source for imgui-react-runtime is public on GitHub (link in response, because algorithm). The high level features are: - Drive Dear ImGUI and Sokol with React - You get a fully natively compiled app with no dependencies and lightning fast startup. The app for the demo in the screenshot is 5.2 MB. - About 3 MB of that is the Hermes runtime (garbage collector, JS primitives, etc). - React is about 1.8 MB compiled to native (600KB when compiled to bytecode). - The rest is the custom React reconciler and renderer, the app code, Dear ImGUI and Sokol. There are many things I wanted to do before making it public, but I guess it is better to do them in public: - Optimize performance. My goal was to get it to work cleanly. Haven't focused on perf - there are some obvious things to improve. - Move more untyped code to typed JS. Specifically the reconciler. - Enable the React Compiler. - Add a lot of NodeJS APIs like fs, etc. - More Dear ImGUI components. - Wrap Sokol rendering APIs with more JS-friendly APIs. The work never ends...
3
33
8,054
Mark Jansen retweeted
Our developer @cbialorucki1 has posted an update about his work on API tests for #ReactOS Read it here, and share: reactos.org/blogs/cbialoruck…
1
8
1
74
3,743
Mark Jansen retweeted
The future is coming. As we shift our focus towards more modern Windows versions, our developer @The_DarkFire__ has written a blog post about researching WDDM on #ReactOS. You can read it here, and share! reactos.org/blogs/investigat…
6
32
188
9,914
Mark Jansen retweeted
Welcome back Hasherezade (@hasherezade) to our RE//verse review board! Hasherezade, a malware analyst and software engineer from Poland, is known for her impactful work in cybersecurity and reverse engineering. @hasherezade has created several open source tools including PE-bear, PE-sieve, and HollowsHunter that are extensively used by analysts and incident responders. She helps share her knowledge with the industry through articles, talks, and trainings on topics including malware analysis, process injection, and memory forensics. AND she’s helping curate the RE//verse 2026 lineup! So be sure to submit your talks before November 14: sessionize.com/reverse-2026
9
29
2
360
28,053
Looks like this SDB policy flag in 25H2 might block EasyAntiCheat.sys on systems with HLAT because of the driver's page table tampering
5
11
1
99
16,487
Skipping Winsock - AFD.sys for-the-win! A series of posts by Mateusz Lewczak (@MateuszLewczak) on how to use afd.sys driver to implement custom network connectivity. Highly recommended! Source: leftarcode.com/posts/afd-rev… #redteam #maldev #malwaredevelopment
1
64
1
235
12,437
Mark Jansen retweeted
this is my short analysis of a little-known security feature built into Windows that inadvertently broke one of our authenticode signatures recently elastic.co/security-labs/mal…
5
52
1
199
22,582
Mark Jansen retweeted
Stack tracing and symbol resolution now working side-by-side with the secure call data itself! Going to clean this up a bit more and publish soon.
You can trace calls to VslpEnterIumSecureMode ("enter/exit" into VTL 1) through the (the value is undocumented?) PERF_VTL1_ENTER ETW perf info mask value and get information about the type of secure call call which occurred (and PID/TID info). The event data is also undocumented.
3
8
60
6,858
Mark Jansen retweeted
Our developer @cbialorucki1 has been hired to work on #ReactOS API test suite! In addition of fixing test infrastructure, his effort will help future NT6 (Vista and newer) compatibility works! Read the news here: reactos.org/blogs/cbialoruck…
5
19
2
135
4,622
Mark Jansen retweeted
"Going Native - Malicious Native Applications" - by Protexity: protexity.com/post/going-nat… - interesting read about using applications with Subsystem: Native for offense
2
54
1
190
13,481
Mark Jansen retweeted
New #TinyTracer (v3.0) is out - with many cool features: github.com/hasherezade/tiny_… - check them!
5
72
4
247
21,808