ReverseThatApp (@ReverseThatApp) header
ReverseThatApp (@ReverseThatApp) profile picture

 Developer/Develop tweak and patch iOS binary/ Reverse Engineering iOS apps (arm, arm64)/ Learning kernel!!

Joined April 2012
Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)Photo by ReverseThatApp (@ReverseThatApp)
ReverseThatApp retweeted
Here's the fourth part of my blog series on Compiler and LLVM internals. Co-authored with @0xP0ch1ta This blog provides a basic introduction to Machine IR, followed by an in-depth explanation of how to write and run an LLVM Machine Function Pass. Key concepts covered: 1. Machine IR 2. Machine Basic Blocks 3. MachineModuleInfo 4. Target, TargetRegistry and TargetMachine. 5. MIR Parser sh4dy.com/2026/10/04/learnin…
49
2
289
11,983
ReverseThatApp retweeted
Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: blackstormsecurity.com/resea… This article will be published on exploitreversing.com/ next week. I would like to thank Ilfak Guilfanov (@ilfak) and Hex-Rays SA (@HexRaysSA) for the continuous support. Hope you enjoy the read! #iOS #Apple #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering
4
103
406
19,678
ReverseThatApp retweeted
Over 90 binary exploitation challenges with detailed writeups. From your first buffer overflow to House of Orange. All free. All open source tools. Assembly fundamentals. Ghidra. GDB. pwntools. Stack overflows through every mitigation bypass: ASLR, PIE, NX, canaries, RELRO. ROP chains: static, dynamic, ret2csu, SROP, stack pivoting, partial overwrites. Format strings. Shellcoding. Then heap exploitation: double frees, use-after-frees, heap grooming, fastbin attacks, tcache poisoning, unsorted bin attacks, large bin attacks, unlink exploitation. House of Spirit. House of Lore. House of Force. House of Einherjar. House of Orange. Integer exploitation. FILE exploitation. Obfuscation and MOVfuscation. Custom architectures. Z3 and angr for symbolic execution. Automatic exploit generation. Every challenge has a writeup walking you from being handed the binary to writing the exploit. No IDA license needed. If you are learning binary exploitation, this is one of the most complete free courses that exists. guyinatuxedo.github.io/ Author: guyinatuxedo Demo Reference: pwndbg.re/stable/ #ExploitDevelopment #ReverseEngineering #InfoSec
9
112
2
547
24,030
ReverseThatApp retweeted
As promised, DarkSword Kernel Exploit writeup is now live at therealclarity.github.io/blo… This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented. Hope it helps anyone looking to understand it! :)
11
120
3
515
50,909
ReverseThatApp retweeted
#deepsec "A Journey to Break Apple's PPL". PPL's been the kernel's last line of defense on A12+ for years, and it's held up. @pattern_F_ shares two ways through — and maybe one opens the door to an iOS 26 jailbreak…? 🙊 deepsec.cc/202607/speaker-pa…
3
31
2
178
39,813
ReverseThatApp retweeted
CSCG 2026 is live (until 01.05.)! 🥳 Jump in, solve challenges, learn something new, and climb the scoreboard. This year CSCG also serves as the OpenECSC for ECSC 2026 Germany. @ECSC_openECSC play.cscg.live/
1
10
1
18
11,967
A three part blog series by @jack_halon provides a great introduction into v8 and JS internals, compilation pipeline and ends with analyzing and exploiting CVE-2018-17463 a JIT vulnerability in Turbofan: jhalon.github.io/chrome-brow… jhalon.github.io/chrome-brow… jhalon.github.io/chrome-brow…
27
1
110
5,482
ReverseThatApp retweeted
Get your macOS 26.0 xnu CodeQL database (and compile_commands.json) here! 👩 ‍ github.com/blacktop/darwin-x…
2
3
36
3,966
After hours of Flutter AOT reversing, Dart object pool decoding & AES key derivation tracing, I became the first globally to crack DroidPass Full write-up reversethat.app/reverse-engi… #Android #AndroidSecurity #ReverseEngineering #CTF #Flutter #Dart #8ksec #DroidPass
Nobody’s cracked this Android lab yet 🤯 Meet DroidPass: Ultimate Password Vault, a purposely flawed password manager hiding its base encryption key inside the APK. Your mission: statically reverse-engineer the app and extract the exact base key used to encrypt the password DB. Think you can be the first to break it? Drop a comment if you’re in. Winner gets ultimate bragging rights🔥 🔗 academy.8ksec.io/course/andr… #MobileSecurity #ReverseEngineering #AndroidSecurity #CTF
8
26
4,449
Just published my #flareon12 challenge 8 write-up Spent hours playing with Intel Pin (wrong path 😅), then switched to a bottom-up event-based approach using WinDbg TTD, x64dbg, ret-sync & IDA — felt like cracking old game trial licenses again 😄 🔗 reversethat.app/posts/flareo…
15
1
54
5,487
ReverseThatApp retweeted
When static analysis hits a wall, dynamic tracing with Frida’s Stalker API reveals what’s really happening at runtime. Learn to trace ARM instructions, filter for ldr/str, and see how obfuscated apps manipulate data: 🔗 8ksec.io/advanced-frida-usag… #ReverseEngineering #AndroidSecurity #iOSSecurity #DynamicAnalysis #Obfuscation #MalwareAnalysis
12
62
3,785
ReverseThatApp retweeted
Tried out Harmony for the first time. It’s super handy for reverse engineering obfuscated C# binaries, especially when it comes to automation. I used to struggle automating steps in dnSpy, but Harmony made it seamless. Checkout my writeup on Securinets CTF kos0ng.gitbook.io/ctfs/write…
5
38
188
10,622
Really enjoyed #flareon12 — especially challenges 7, 8, and the brutal but fun final challenge (9). 🧠🔥 Thanks to @Mandiant for another amazing RE CTF. #CTF #ReverseEngineering #CyberSecurity
3
31
2,410
ReverseThatApp retweeted
We present appledb_rs, an open-source tool to analyze Apple IPSWs without storing full images. Extraction, indexing, API, and web interface to speed up your security research 🔍 🔗 Full article available here: synacktiv.com/en/publication… 📂 Source code: github.com/synacktiv/appledb…
20
93
9,714
ReverseThatApp retweeted
Devirtualizing VMProtect and Themida nac-l.github.io/2025/01/25/l… #infosec #reverseengineering
1
45
1
179
12,084
ReverseThatApp retweeted
#flareon12 pre-register now at flare-on12.ctfd.io The puzzles are unleashed tomorrow.
2
20
2
52
10,295
ReverseThatApp retweeted
Community Write-Ups from 8kSec Mobile Security Battlegrounds Our free Mobile Security Labs have inspired some excellent technical deep dives. Below is a running list of community write-ups that detail their techniques, tooling, and exploitation steps. 🤖Android Labs @f0rk3b0mb – f0rk3b0mb.github.io/p/8ksec_… - Challenges covered: AndroPseudoProtect, AndroDialer, DroidCave, DroidView, DroidWars, ReconDroid. @lautarovculic – Android Labs write-ups: ReconDroid: lautarovculic.github.io/writ… GeofenceGamble: lautarovculic.github.io/writ… FactsDroid: lautarovculic.github.io/writ… DroidWars: lautarovculic.github.io/writ… DroidView: lautarovculic.github.io/writ… DroidCave: lautarovculic.github.io/writ… BorderDroid: lautarovculic.github.io/writ… AndroPseudoProtect: lautarovculic.github.io/writ… AndroDialer: lautarovculic.github.io/writ… Shuiboye Blog: BorderDroid: shuiboye.blogspot.com/2025/0… DroidView: shuiboye.blogspot.com/2025/0… 🍏iOS: @n0ps3 – FridaInTheMiddle (iOS Lab) Solution: n0psn0ps.github.io/2025/07/1… @ReverseThatApp – FreeFallGame (Reverse engineering an iOS Flutter game): reversethat.app/reverse-engi… ⚙️Arm64 @karmaz95 – Use After Free — Callback to Shell Lab Solution and additional ARM64 references: patreon.com/posts/arm64-refe… We thank you all for sharing your insights and creating these valuable references for anyone looking to sharpen their mobile security skills! Want to try the labs yourself? All challenges are free: 8ksec.io/battle #MobileSecurity #ReverseEngineering #ExploitDevelopment #iOSSecurity #AndroidSecurity #ARM64
2
18
37
2,309
The 12th Annual Flare-On Challenge kicks off Sept 26 at 8PM EST! Reverse engineering pros, from Windows to Web3 (with a YARA twist), it's your time to shine. 🏆 Get ready → bit.ly/4ofb5g8 #FlareOn12
1
76
4
188
21,250