Security Software Engineer — Windows vuln research & exploits | Reverse Engineer, Obfuscation & De-Obfuscation Practitioner & Compilers Backend 👾🥤
Joined September 2022
- Tweets179
- Following705
- Followers959
- Likes1.2K
Pinned Tweet
Whatever the brands of your smartphone are no guarantee of digital security because attackers keep evolving their game. 👨💻🏴
x86byte retweeted
Just added native @Droid / @FactoryAI support to our open-source firmware reverse engineering toolkit.
5 skills extraction, static analysis, Ghidra, emulation, and security reporting.
github.com/OrbitCurve/firmwa…
x86byte retweeted
Wrote up my attempt at deobfuscating Luraph-protected Lua: lifting Lua to LLVM IR , then using AI + partial evaluation to strip the VM, and checking it against the original.
nac-l.github.io/2026/10/12/d…
x86byte retweeted
Today we’re soft launching BitBender, a SaaS for automated binary deobfuscation: unpacking, import fixing, OEP restore, and related prep.
IDA and Binja MCP are powerful, but packed or obfuscated samples still bog down LLM analysis. BitBender is meant to clear that layer first.
Early beta. If you want access, get in touch: bitbender.io
x86byte retweeted
Blogpost acerca de como explotar el CVE-2026-81963 con la explicacion del diff y el codigo de un poc basico funcional que eleva a SYSTEM, que por supuesto mejoramos muchisimo en el exploit que releaseamos para Core Impact, pero servira para entender por donde va la cosa.
coresecurity.com/blog/cve-20…
Public PoC for CVE-2026-102282, an adm-zip Local Privilege Escalation via SUID/SGID permission preservation.
github.com/x86byte/adm-zip_L…
Recently Submitted a GitHub Bug Bounty report demonstrating a successful Security Policy Bypass.
Closed as Informative — the Bypass was valid but didn't cross a trust boundary under their threat model.
On to the next hunt.
Ah, the bittersweet badge of honor: finding a legit bug on GitHub only to hit the internal duplicate wall.
No bounty this time, but solid confirmation that the methodology works and the threat model was spot on.
GG @GitHubSecurity security team, on to the next hunt
x86byte retweeted
Using BLARE2 for binary instrumentation to guide fuzzing via coverage. Seems to work well, two discord/chromium crasher media files in 30min~
We can instrument arbitrary PE files (no source or debug info needed).
github.com/aftermathlabs/dis…
I found a Local Privilege Escalation (LPE) in adm-zip. Crafted ZIP external attrs carry SUID/SGID bits into fs.chmodSync() when keepOriginalPermission=true. Extraction as root plants a setuid root binary; any local user gets root. High/CWE-732. Used by 2M users. Patched in 0.6.1
Great work getting this fixed upstream, and great writeup
I found an issue that broke impacket and pretty much all tools relying on it (rbcd.py, certipy ..) when handling ldap tickets in multi domain forests during anySPN fallback, and submitted a patch that was merged upstream (1/2) 🧵
x86byte retweeted
Compiled #V8 bytecode is still a niche #malware format, but it highlights a broader analysis problem: what happens when a payload falls between established toolchains?
At #BlackHat2026, I’ll walk through the #JSCeal case study and the static deobfuscation toolkit I built to recover readable code.
If you’ll be at #BlackHat, I’d be glad to see you there!
blackhat.com/us-26/briefings…
x86byte retweeted
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now.
back.engineering/blog/31/07/…
Static Devirtualization of Tencent VM by @BackEngineerLab. Great read for anyone interested in VM-based obfuscation and devirtualization.
back.engineering/blog/31/07/…
x86byte retweeted
Compiled V8 bytecode malware is a blind spot for defenders. At #BHUSA, @hasherezade shows how Check Point Research broke down JSCeal and built an open source toolkit that decoded 15/15 payloads, offering a repeatable approach to bytecode threats. blackhat.com/us-26/briefings…
x86byte retweeted
This stuff needs to be fixed pronto. @X @nikitabier @elonmusk
Security research is not a violation, there's a reason this place is heavily used and has been heavily used for the security industry to promote defense and offense.
If X continues to ban legitimate security professionals, researchers, I'm out of this place for sure.
@X @nikitabier @elonmusk I am once again asking you to review your policies and procedures around offensive security research.
cfgrip v1.0.0 - gitlab.com/BinaryHardening/c…
PE/ELF 32/64 CFG extractor. Capstone disasm, indirect call resolution (GOT, jump tables, reg tracing). JSON output with xrefs & stack deltas. Full / subs-only / clean modes.
Moved to GitLab, GitHub flagged the org. Appreciate the support.
