
Security researcher, focusing on hardware, firmware and OS security | https://xitter.cf/t.co/qdj70wzFaW | PhD candidate @vu5ec | @0Xiphorus@infosec.exchange
The Netherlands
Joined August 2017
- Tweets120
- Following237
- Followers490
- Likes267
Björn Ruytenberg retweeted
Debug beyond conventional limits.
Explore Hypervisor-Assisted Reverse Engineering workshop at Hardwear.io N L2026 and uncover low-level Windows behavior through hypervisor-level visibility.
Register now: hardwear.io/nl-2026/talks-sp…
#HardwearNL2026
Links to all videos on YouTube are up at eipsi.win.tue.nl/surveillanc… and we're adding slides as we get them
When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security
By Björn Ruytenberg
- Malicious PCIe device (via Thunderbolt) gains direct memory access.
- Can bypass Windows lock screen.
- Can read BitLocker keys from RAM.
- Can inject code into kernel memory.
Registration is open for our next Security in Times of Surveillance event taking place 26 June at @TUe_MCS eipsi.win.tue.nl/surveillanc…
Speakers include Martin Albrecht, Chloe Berthelemy, Rikke Bjerg Jensen, Thomas Lohninger, Bjoern Ruytenbert, and Carmela Troncoso
Major milestone forward for HyperDbg supporting #Linux.
We've made a major progress on porting HyperDbg to Linux (still a long road ahead). Now the HyperDbg SDK can be compiled with GCC for both user/kernel modes on Linux.
More updates coming soon...👀
github.com/HyperDbg/HyperDbg…
Slides and recordings for our @FOSDEM talks are up! Join an in-depth introduction into @HyperDbg 's features and internals, or find out what's the latest in anti-anti-debugging techniques and HV transparency for malware reversing:
fosdem.org/2026/schedule/eve…
fosdem.org/2026/schedule/eve…
Curious about anti-anti-debugging techniques and hiding hypervisors from malware? Or simply looking for an in-depth introduction to @HyperDbg? Join @Intel80x86 and my @FOSDEM talks tomorrow:
fosdem.org/2026/schedule/eve…
fosdem.org/2026/schedule/eve…
0b6732a0b1f608cfaf48baa926b781dbcb653a9979901788310010719f6f5fd3632d47c09da3446ae461f03e12e421ee
e10451e60a858a98a8f3ddb2ec9c414516d404f43299f67d45b0dd9e9c9f14470c13937c13fc2f7d3434758cd88b39fc
We have received reports @HyperDbg's latest release shows unexpected behavior. As it turns out, this is due to a compiler optimization bug in Visual Studio 17.14.8 and 17.14.9. We have pushed a temporary workaround fixing the build. Thanks for reporting! (1/2)
Apparently this issue is affecting others too. As we can't revert to older GH runner image versions, we will temporarily publish unoptimized release builds until MS pushes a fixed runner image. xitter.cf/rpcs3/status/194606920… github.com/actions/runner/is… (2/2)
Björn Ruytenberg retweeted
I'm happy to announce that @HyperDbg v0.14 is released!
This version includes HyperEvade (beta preview), fixes Win11 24H2 compatibility issues, and adds multiple timing functions to the script engine (Special thanks to @0Xiphorus).
Check it out: github.com/HyperDbg/HyperDbg…
(1/3)
Curious about anti-anti-debugging techniques and hiding hypervisors from malware? Slides are up for ECOOP/DEBT 2025 talk where we present HyperEvade, our upcoming hypervisor transparency extension for @HyperDbg : github.com/HyperDbg/slides/b… (1/2)
HyperEvade is targeted for @HyperDbg 's next major release - so watch this space! (2/2)
Björn Ruytenberg retweeted
HyperDbg v0.13.1 has been released. 💫
This version includes improved mitigations against anti-hypervisor techniques used to detect nested virtualization environments, along with various bug fixes.
Check it out:
github.com/HyperDbg/HyperDbg…
Björn Ruytenberg retweeted
HyperDbg v0.13 is out! 🎉
This version comes with a new command '!pcicam' for dumping and interpreting PCIe CAM, new anti-anti-hypervisor methods, improved MMIO scripting, plus lots of bug fixes & improvements.
Big thanks to @0Xiphorus & @AbbasMasoumiG.
github.com/HyperDbg/HyperDbg…
Björn Ruytenberg retweeted
The first HyperDbg release of 2025 is out! 🎉
This version (v0.12) introduces commands for PCI/PCI-e device tree enumeration and IDT dumping, plus many bug fixes.
Huge thanks to @0Xiphorus, @reodus_, @binophism & other contributors!
🔗 Check it out:
github.com/HyperDbg/HyperDbg…
Björn Ruytenberg retweeted
HyperDbg v0.11 is released! ✨
This version comes with bug fixes, improvements, and two new commands for viewing Local APIC (XAPIC/X2APIC) and IO APIC.
Big shoutout to @0Xiphorus for joining the team for bringing PCIe support to HyperDbg!
github.com/HyperDbg/HyperDbg…
Incredibly honored to have won the @ACCSS_NL Best Cybersecurity Master Thesis award! If you're interested in Thunderbolt security, my thesis is available online here: research.tue.nl/en/studentTh… @TUeindhoven @TUe_MCS #Thunderspy
This Post is from an account that no longer exists. Learn more
Björn Ruytenberg retweeted
Very happy to see Björn @0Xiphorus get this recognition!
This Post is from an account that no longer exists. Learn more




















