Pinned Tweet
It's a pleasure to announce the release of open-obfuscator: a free and open-source solution
for obfuscating Android and iOS applications (Java/Kotlin, C/C++/Objective-C)
romainthomas.fr/post/22-10-o…
obfuscator.re
Extracting liblockdown.dylib from visionOS dyld shared cache and running it
with a DBI on macOS?
Challenge accepted!
📖 Blog: romainthomas.fr/post/24-09-a…
🎞️ Demo: youtube.com/watch?v=5L05OE5m…
⌨️ Code: github.com/romainthomas/visi…
Funny DMCA that worth reading :
github.com/github/dmca/blob/…
"... is a leading mobile application security solution that provides comprehensive protection..."
[...] later on
The accused projects, available at <> are specifically designed to bypass (all) advanced security measures
"By providing these tools and methods, these repositories compromise the security and integrity of applications protected by xxxx, causing potential harm to users and developers relying on our technology for protection."
The unauthorized use of our SEO keyword "The #1 App shielding solution" can significantly impact our business by [...]
LIEF 0.15.0 is released! You can checkout lief.re/blog/2024-07-21-lief… for the details.
There is an new "extended" version of LIEF which exposes API to inspect ObjC metadata,
DWARF & PDB (based on LLVM). If you want to beta-test this version, you can ping
[email protected]
- lief.re/doc/latest/extended/…
- extended.lief.re/
LIEF Rust bindings updates: documentation, PE authenticode, ...
lief.re/blog/2024-06-16-rust…
LIEF Rust bindings are now supported for iOS and Linux ARM64!
This means that the bindings for these platforms can be used with cargo [cross-]compilation:
$ cargo build --target=<aarch64-apple-ios|aarch64-unknown-linux-gnu>
I'm pleased to announce that LIEF's Rust bindings are out: lief.re/blog/2024-04-28-rust…
Long journey but worth it :)
Sounds like LIEF is close to have its Rust bindings: lief-rs.s3.fr-par.scw.cloud/…
Romain THOMAS retweeted
LIEF v0.14.0 is out!
lief-project.github.io/blog/…
Romain THOMAS retweeted
WhiteBox Cryptanalysis Christmas has come early this year and it brought a gift:
Introducing Blue Galaxy Energy by @doegox and Nicolas Subayrole, the first open source implementation of the BGE attack that turns 20 years old in 2024.
blog.quarkslab.com/blue-gala…
(1/2) It's great to see this kind of blog post after all the storm of communication
about XCode 15 bitcode removable (and the misunderstanding about what it really removed).
Bitcode is a core component of the #LLVM compilation technology, and iXGuard is able to maintain seamless compatibility with Apple and LLVM. Learn more here: hubs.la/Q0283c9F0
#iOS #CyberSecurity
Nice walkthrough about control-flow flattening!
Here's my writeup on building your own control flow flattening LLVM pass lodsb.com/control-flow-flatt…
Romain THOMAS retweeted
The challenge is now over!
Congratulation to @nneonneo for winning the write-up quality price and
congratulation to korami as well for his solution.
You can check them out here:
- obfuscator.re/challenges/202…
- obfuscator.re/challenges/202…
(1/2)
Awesome! Looking forward for the writeup :)
Playing with LLVM based control flow flattening (heavily inspired by @rh0main's @open_obfuscator), super basic initial demo is running github.com/samrussell/obfus/…
Writeup will come later (and @vector35 based attacks!)
























