Mark Jansen retweeted
PPEE 1.16 is out!
- Hex editor improved with context menu, Highlighting, Copy & Paste, Find
- Follow in Hex editor, menu item is active now
- Editable combo-box added for bitfields
- Keyboard shortcuts revised
>> RT please <<
Download:
mzrst.com
Mark Jansen retweeted
PPEE (puppy) 1.14 is released
- Added new Search box for bottom listview
- Added section names in Strings and Data dirs
- List of TLS callbacks
- #Reproducible build hash support
- More info about sections
- Rich Header parsing improved
#Malware #DFIR
Https://mzrst.com
Mark Jansen retweeted
Longplay of Serious Sam on real hardware.
2560x1440p, 4x Multisample AA, 16x Anisotropic Filtering.
All achieved with #ReactOS!!!
Watch the test by @AotoriHibiki here:
youtu.be/7PNlxHqw-bA
Mark Jansen retweeted
Today marks 30th year of #ReactOS. Happy Birthday ReactOS!
We would like to thank everyone for supporting us along our long journey of building a Windows-compatible, free and open source OS!
Read our 30th year blog post here:
reactos.org/blogs/30yrs-of-r…
Mark Jansen retweeted
Starting 2026 with a new blog! I've really been enjoying my Windows on ARM machine - so my post is about interrupts for WoA. This includes x64/ARM differences, virtual interrupts, Hyper-V's synthetic controller, and Secure Kernel interrupts/intercepts
connormcgarr.github.io/windo…
Mark Jansen retweeted
New year present from Timo!
After months of preparatory work, MSVCRT in #ReactOS has just been synced with Wine-10.0!
Overall 30% decrease in API test failures, newly working/improved apps and... Another major step for NT6 compatibility bringup achieved!!!
Mark Jansen retweeted
Unexpected experiment, volume 1:
The source for imgui-react-runtime is public on GitHub (link in response, because algorithm).
The high level features are:
- Drive Dear ImGUI and Sokol with React
- You get a fully natively compiled app with no dependencies and lightning fast startup.
The app for the demo in the screenshot is 5.2 MB.
- About 3 MB of that is the Hermes runtime (garbage collector, JS primitives, etc).
- React is about 1.8 MB compiled to native (600KB when compiled to bytecode).
- The rest is the custom React reconciler and renderer, the app code, Dear ImGUI and Sokol.
There are many things I wanted to do before making it public, but I guess it is better to do them in public:
- Optimize performance. My goal was to get it to work cleanly. Haven't focused on perf - there are some obvious things to improve.
- Move more untyped code to typed JS. Specifically the reconciler.
- Enable the React Compiler.
- Add a lot of NodeJS APIs like fs, etc.
- More Dear ImGUI components.
- Wrap Sokol rendering APIs with more JS-friendly APIs.
The work never ends...
Mark Jansen retweeted
Our developer @cbialorucki1 has posted an update about his work on API tests for #ReactOS
Read it here, and share:
reactos.org/blogs/cbialoruck…
Mark Jansen retweeted
The future is coming.
As we shift our focus towards more modern Windows versions, our developer @The_DarkFire__ has written a blog post about researching WDDM on #ReactOS.
You can read it here, and share!
reactos.org/blogs/investigat…
Mark Jansen retweeted
Welcome back Hasherezade (@hasherezade) to our RE//verse review board! Hasherezade, a malware analyst and software engineer from Poland, is known for her impactful work in cybersecurity and reverse engineering. @hasherezade has created several open source tools including PE-bear, PE-sieve, and HollowsHunter that are extensively used by analysts and incident responders. She helps share her knowledge with the industry through articles, talks, and trainings on topics including malware analysis, process injection, and memory forensics. AND she’s helping curate the RE//verse 2026 lineup! So be sure to submit your talks before November 14: sessionize.com/reverse-2026
Mark Jansen retweeted
Looks like this SDB policy flag in 25H2 might block EasyAntiCheat.sys on systems with HLAT because of the driver's page table tampering
Mark Jansen retweeted
Skipping Winsock - AFD.sys for-the-win!
A series of posts by Mateusz Lewczak (@MateuszLewczak) on how to use afd.sys driver to implement custom network connectivity.
Highly recommended!
Source: leftarcode.com/posts/afd-rev…
#redteam #maldev #malwaredevelopment
Mark Jansen retweeted
this is my short analysis of a little-known security feature built into Windows that inadvertently broke one of our authenticode signatures recently elastic.co/security-labs/mal…
Mark Jansen retweeted
Stack tracing and symbol resolution now working side-by-side with the secure call data itself! Going to clean this up a bit more and publish soon.
Mark Jansen retweeted
Our developer @cbialorucki1 has been hired to work on #ReactOS API test suite! In addition of fixing test infrastructure, his effort will help future NT6 (Vista and newer) compatibility works!
Read the news here: reactos.org/blogs/cbialoruck…
Mark Jansen retweeted
"Going Native - Malicious Native Applications" - by Protexity: protexity.com/post/going-nat… - interesting read about using applications with Subsystem: Native for offense
Mark Jansen retweeted
New #TinyTracer (v3.0) is out - with many cool features: github.com/hasherezade/tiny_… - check them!
Mark Jansen retweeted
What if we traced local functions just like we trace the exported APIs? 👀Coming soon in #TinyTracer...
Mark Jansen retweeted
I haven't been publishing much lately, but not because I haven't been doing research -- in fact, I've done more than ever in the past five years. My ~200KLOC backlog will soon begin trickling out into the IDA/Hex-Rays ecosystem.
👋 Please join us in welcoming @RolfRolles as Hex-Rays’ new Chief Scientist!
Rolf brings decades of RE expertise, with standout work in obfuscation, decompilation, and software protection. At Hex-Rays, he’ll lead research into next-gen decompilation and automated program understanding to keep our tools at the cutting edge.
We’re thrilled to have him on board!
#ReverseEngineering #IDAPro #BinaryAnalysis #Decompilation