We

Break

Software.

Oct 21, 2024 'Reflections on Trusting Trust', but completely by accident this time

duk tagged llvm

Aug 23, 2024 Ring Around The Regex: Lessons learned from fuzzing regex libraries (Part 2)

addison tagged fuzzing

Jun 30, 2024 Ring Around The Regex: Lessons learned from fuzzing regex libraries (Part 1)

addison tagged fuzzing

Dec 24, 2023 RISC-Y Business: Raging against the reduced machine

mrexodia, oopsmishap tagged obfuscation, windows, llvm

Jun 5, 2023 Abusing undocumented features to spoof PE section headers

x86matthew tagged windows, PE

Aug 29, 2022 Bootkitting Windows Sandbox

mrexodia, sdoogm tagged windows, UEFI, bootkit

Aug 8, 2022 Improving MBA Deobfuscation using Equality Saturation

fvrmatteo, mrphrazer tagged synthesis, obfuscation

May 11, 2022 Earn $200K by fuzzing for a weekend: Part 2

addison tagged binary-exploitation, fuzzing, bug bounty

May 11, 2022 Earn $200K by fuzzing for a weekend: Part 1

addison tagged fuzzing, bug bounty

Sep 8, 2021 Tickling VMProtect with LLVM: Part 3

fvrmatteo tagged lifting, llvm, vmprotect

Sep 8, 2021 Tickling VMProtect with LLVM: Part 2

fvrmatteo tagged lifting, llvm, vmprotect

Sep 8, 2021 Tickling VMProtect with LLVM: Part 1

fvrmatteo tagged lifting, llvm, vmprotect

Jun 28, 2021 Windows 11: TPMs and Digital Sovereignty

can1357, daax, everdox tagged windows, tpm, drm

May 23, 2021 Preventing memory inspection on Windows

jm tagged windows, anti-debug

May 13, 2021 Counter-Strike Global Offsets: reliable remote code execution

brymko, dezk, Simon Scannell tagged guest, source-engine, binary-exploitation, pwn

Apr 20, 2021 CVE-2021-30481: Source engine remote code execution via game invites

floesen tagged source-engine, binary-exploitation, pwn

Apr 9, 2021 A look at LLVM - comparing clamp implementations

duk tagged llvm

Apr 3, 2021 How Runescape catches botters, and why they didn't catch me

vmcall tagged automation, reverse-engineering, game-hacking

Jan 29, 2021 BitLocker touch-device lockscreen bypass

Abdelhamid Naceri tagged windows

Jan 20, 2021 Process on a diet: anti-debug using job objects

jm tagged windows, anti-debug

Jan 15, 2021 BitLocker Lockscreen bypass

Jonas L tagged windows

Jan 14, 2021 Escaping VirtualBox 6.1: Part 1

Sauercl0ud, a2nkf, localo tagged guest, binary-exploitation, pwn, ctf

Jan 12, 2021 Hiding execution of unsigned code in system threads

drew tagged kernel, windows, anti-cheats

Jan 4, 2021 New year, new anti-debug: Don't Thread On Me

jm tagged windows, debugging

Oct 30, 2020 Wormable remote code execution in Alien Swarm

mev tagged binary-exploitation, pwn

Aug 14, 2020 Abusing MacOS Entitlements for code execution

impost0r tagged macos, gatekeeper, security-bypass, dropbox, visual-studio, burp-suite

Jul 6, 2020 BattlEye client emulation

vmcall tagged battleye, reverse-engineering, anti-cheats

Jul 1, 2020 Windows Telemetry service elevation of privilege

Jonas L tagged exploit, pwn, windows

Jun 19, 2020 Cracking BattlEye packet encryption

yousif, namazso, DefCon42, can1357 tagged battleye, reverse-engineering, anti-cheats, cryptography, eft

May 26, 2020 Introduction to UEFI: Part 1

shatter, Mattiwatti tagged UEFI, EFI, EDK2

May 12, 2020 Abusing DComposition to render on external windows

yousif tagged windows, reverse-engineering

May 5, 2020 Source Engine Memory Corruption via LUMP_PAKFILE

impost0r tagged source-engine, game-exploitation, binary-exploitation, memory-corruption, csgo

Apr 28, 2020 Why anti-cheats block overclocking tools

daax tagged windows, reverse-engineering

Apr 23, 2020 From directory deletion to SYSTEM shell

Jonas L tagged exploit, pwn, windows

Apr 17, 2020 Why anti-cheat software utilize kernel drivers

vmcall tagged anti-cheats

Apr 16, 2020 How Escape from Tarkov ensures game integrity

vmcall tagged battleye, reverse-engineering, anti-cheats

Apr 15, 2020 SQL Injecting FlyFF MMO

qfrtt tagged pwn

Apr 13, 2020 How anti-cheats detect system emulation

daax, iPower, ajkhoury, drew tagged anti-cheats, hypervisors, reverse-engineering, easy-anti-cheat, battleye

Apr 10, 2020 Kernel debugging in seconds with Vagrant

invokestatic tagged windows, debugging, tooling, reverse-engineering

Apr 8, 2020 CVEAC-2020: Bypassing EasyAntiCheat integrity checks

iPower tagged easy-anti-cheat, anti-cheats

Mar 31, 2020 BattlEye reverse engineer tracking

vmcall tagged battleye, reverse-engineering, anti-cheats

Feb 26, 2020 Bypassing BattlEye from user-mode

yousif tagged battleye, reverse-engineering, anti-cheats

Jan 23, 2020 BattlEye communication hook

vmcall tagged battleye, reverse-engineering, anti-cheats

Jan 12, 2020 BattlEye hypervisor detection

vmcall, daax tagged battleye, reverse-engineering, anti-cheats

Jan 11, 2020 BattlEye single stepping

vmcall tagged battleye, reverse-engineering, anti-cheats

Jan 5, 2020 BattlEye stack walking

vmcall tagged battleye, reverse-engineering, anti-cheats

Jan 5, 2020 BattlEye shellcode updates

vmcall tagged battleye, reverse-engineering, anti-cheats

Nov 6, 2019 Bypassing kernel function pointer integrity checks

vmcall tagged windows, reverse-engineering

Oct 18, 2019 Hooking the graphics kernel subsystem

vmcall tagged windows, reverse-engineering

May 16, 2019 Exam surveillance - the return. (ExamCookie)

vmcall tagged reverse-engineering

Mar 7, 2019 The nadir of surveillance (Den Digitale Prøvevagt)

vmcall tagged reverse-engineering

Feb 10, 2019 BattlEye anti-cheat: analysis and mitigation

vmcall tagged battleye, reverse-engineering, anti-cheats

Jan 24, 2019 Reverse engineering 'Black Desert Online' (2. Speed -> local entity)

vmcall tagged reverse-engineering, game-hacking

Jan 9, 2019 Reverse engineering 'Black Desert Online' (1. Preface)

vmcall tagged reverse-engineering, game-hacking