Binary Wizards: security, reverse engineering, programming, AI and more.

USA
Friends, @allthingsida was a fun experiment while it lasted. The account is now parked and links to @BinaryWizards. The AllThingsIDA YouTube channel will no longer receive updates. Going forward, new videos will be published on the Binary Wizards channel: piped.video/@binary-wizards I’m still focused on learning, teaching, and sharing what I find interesting. The difference is that the scope is now broader than just IDA. Expect workshops, training courses, videos, articles, and discussions covering reverse engineering, binary analysis, low-level programming, systems, tooling, and other topics that fit under the Binary Wizards umbrella. Thanks to everyone who followed AllThingsIDA. I hope you’ll continue the journey with me at BinaryWizards.
6
27
138
9,229
Finally got some time to implement deep links in IDASQL. A few more unrelated bug fixes and features and 0.0.19 will be out.
2
32
1,864
ghidrasql 0.0.7 is out: control Ghidra's auto-analysis from SQL. UPDATE program_options to turn analyzers off, INSERT INTO analysis_passes to re-run analysis, DELETE to cancel it. Or skip slow analyzers at import with --analyzers-off. github.com/0xeb/ghidrasql/re…
1
4
50
32,696
Vibe Reverse Engineering #2: GhidraSQL, all you need to know! Multiple binaries at once, type recovery, source recovery back to disk, database annotation, headless workflows, and a few real Windows security research scenarios. piped.video/watch?v=ceSd1-j-…
1
15
118
10,037
For the Windows research examples, I use kernel drivers, vulnerable drivers, and at one point casually pick the Windows hypervisor with basically no prior knowledge just to see how far the workflow can take it. And yes, there is a frontier-model rant in there too.
1
1
261
-- So what next? BNSQL series, then r2xsql, and a dedicated post about libghidra!
2
208
IDA QScripts 1.2.8 maintenance release out. github.com/allthingsida/qscr…
2
30
1,750
Amazing.
Haha. Whatever that means. And I was told: appeal, it will work, etc. I don’t understand this warning but I already made up my mind: don’t touch any security work with OpenAI products. Period. Toy weekend projects, fine. Helping the security community: bad.
2
1,571
I have been refactoring my IDA plugins and hence the simple personal wrapper library libidacpp (github.com/allthingsida/libi…). I don't recommend you adopt it, since it keeps updating and is meant for my tooling only. Expect a refresh of a bunch of my IDA plugins soon.
1
7
34
2,552
Any friends at OpenAI who can help out? It sucks to have my account deactivated eventually.
I got my first "OpenAI ChatGPT - Usage Policy Violation & Deactivation Warning" . No idea why. I don't even do anything out of the normal. Of course, false positives, but this is not fun. Yes, I wrote RE tools and test them, like GhidraSQL, IDASQL and BNSQL. github.com/0xeb/ghidrasql But does that mean I am doing "Cyber Abuse" ? ;( @OpenAI , any help is appreciated!
2
4
1,812
Could this be why? :(
Reverse engineering, run entirely from my phone. @OpenAI's @ChatGPT Work recovered compiling source from a stripped binary while I was on a walk. It built the toolchain itself and chose its own target. My only input: clone GhidraSQL and go. github.com/0xeb/TheBigPrompt…
1
759