Shiva JIT binary patching engine, made open source under the MIT license at DEFCON. github.com/advanced-microcod…

Saruman is an anti-forensics executable injector with thread injection, allowing a program to run on a thread of execution within a remote process. (Originally found at bitlackeys.org/#saruman) It's been 10 years and I finally re-wrote it from scratch just this last week and tested it on Ubuntu 24. github.com/elfmaster/saruman It may come in handy for some of you folks.

Take peek at this demo video illustrating Shiva's power across 4 separate use-cases involving binary hacking that in past days would have required advanced knowledge of ELF internals and reversing. Demo video content: 1. Game hacking, add 31337 lives to ./pacman with a simple Shiva patch 2. Fixing redis memory corruption vulnerability CVE-2025-46817 on-the-fly 3. Implementing Fine-Grained ASLR for x86_64 Linux with a custom Shiva module 4. Use Shiva to splice code into functions by source line-number with DWARF enhancements Demo Video: arcana-research.io/static/sh… Shiva software: arcana-research.io/shiva

Pleased to announce the release of my paper in tmp.0ut issue 5: Fine grained load-time ASLR for ELF executables in X86_64 Linux (tmpout.sh/5/19.html) this issue is absolutely loaded with Gems and Treasures of the underground!

We are pleased to release tmp.0ut 5 Volume! Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!! tmpout.sh/5/

Linux Game Cheats with Shiva! Get 31337 lives in Pac-Man with a Shiva patch. Shiva is a custom dynamic linker for binary patching in Linux. This example applies a load-time patch to the classic game on x86_64 (ARM64 support also available). Write your patch in C as a relocatable object, then run the binary with Shiva as the loader. Simple, clean, and powerful. Full demo: piped.video/fDkfSn9lC7g

Slides for my invited talk at @IEEESSP #langsec: "Large Language Models for Software Autospecification" - langsec.org/spw26/slides/van… joint work with @shubhamdugare and @TarunSures41845 at @TechAtBloomberg This is the new thing to pay attention to for software defense.

Granular ASLR for ELF executables in Linux, implemented in C with a Shiva ELF microprogram: piped.video/uHSPspFR4gg Building in-process security mitigations for Linux is efficient, pragmatic, and easy with Shiva arcana-research.io/shiva -- A custom dynamic linker for ELF micropatching with relocatable code. Shiva not only loads and installs granular runtime patches but it can run ELF microprograms that execute before ld-linux.so has been executed, allowing for powerful instrumentation capabilities. github.com/advanced-microcod… This implementation of gASLR works on ELF binaries that are compiled and linked with: gcc -Wl,--emit-relocs -mcmodel=large -fPIC -pie Requirements: PIE, large code model, and preserved .text relocations (e.g. .rela.text section). This prototype module uses the .text relocation information in its endeavours to re-write the code-layout with randomly ordered functions. Future versions will work with small code model binaries and randomly re-order PLT entries and global data in addition to functions. The source code for this prototype of gASLR is here: github.com/advanced-microcod…

A new release for ECFS (Extended core-file snapshots) for Ubuntu 20 - 24, resurrected for the DARPA EBOSS program-- enhanced ELF coredumps in automated vulnerability research. github.com/elfmaster/ee-ecfs

Check out my upcoming Advanced ELF hacking workshop focused on state-of-the-art ELF binary patching techniques to solve real-world binary patching problems with Shiva. eventbrite.com/e/the-art-of-…

Pleased to announce my upcoming advanced ELF hacking course. 2-day instructor led workshop by ElfMaster Workshop title: "The Art of ELF binary patching in Linux". Become a pro at ELF binary patching with Shiva and learn the fundamental principles necessary to build custom ELF interpreters, loaders, and linkers to solve some of the worlds hardest security problems today. Get the early bird special before April 13th. eventbrite.com/e/the-art-of-… #ReverseEngineering #BinaryPatching

Check out the Shiva user manual, it's a bit out-dated and doesn't include the latest DWARF or x86_64 support. github.com/advanced-microcod…