@binophism

low level & RE Enthusiast

binophism.github.io
Joined June 2022
  • Tweets104
  • Following539
  • Followers76
3Media
Mohammad retweeted
dunadan@udunadan26 Oct 2025
How does advanced researcher differ from a beginner? Advanced researcher inevitably becomes a weird specialist in target area (compilers, browsers, kernels, servers) more than a "hacker". Experienced researcher is ontologically closer to target's developer than to VR beginner.
dunadan@udunadan21 Oct 2025
My expanded take on how to get started in vulnerability research github.com/udunadan/notes/bl…

notes/How to Get Started In Vulnerability Research.md at main · udunadan/notes

Contribute to udunadan/notes development by creating an account on GitHub.

github.com
3
17
1
142
25,347
Mohammad retweeted
dunadan@udunadan1 May 2025
When you're trying to take time off vulnerability research due to productivity hampered by burnout and recognize nothing else excites you as much as VR
2
24
1,553
همین‌طوری چند وقت پیش تفریحی داشتیم روی پیاده‌سازی یه پروتکل ارتباطی خاص با @reodus_ کار می‌کردیم. یهو نصف‌شب زد به سرمون، گفتم: امیر، بیا یه نگاهی بهش بندازیم. 1
1
1
265
یکهو به یه چیز عجیب برخوردیم! چند جا رو چک کردیم، اون فانکشن روی پلتفرم‌های مختلف به‌صورت سکیور کد زده شده بود، اما سرتونو درد نیارم... یه آسیب‌پذیری پیدا کردیم!
1
1
235
ماجرا همین‌جا تموم نشد! دیدیم این بخش قبلاً سیف بوده، اما چند وقت پیش یکی یه کامیت زده و اون کامیت هم مرج شده! خلاصه... تو خود حدیث مفصل بخوان از این مجمل!
1
163
Mohammad retweeted
dunadan@udunadan10 Mar 2025
The key difference between ctf & n-days vs. zero-day research is that with the latter, you can never be sure there is a bug at all. You're gambling with time & job, can't do that indefinitely, & existentially need to develop heuristics of leaving & pursuing at the right pace 1/2
dunadan@udunadan10 Mar 2025
CTF does nothing to prepare you for psychological pressure of VR. You need months of pure context learning to even come up with solid ideas & every time you miss, fear starts crawling in: what if I never find anything? Will I deliver or be fired? This is what breaks people.
2
7
78
9,768
🔥🎉بچه‌های امنیت! نوروز ۱۴۰۴ رو با یه CTF هیجان‌انگیز شروع کنیم!🎉🔥 تیم FlagMotori براتون یه رقابت جذاب تدارک دیده!😍🛡 📅زمان: ۲۵ اسفند ۱۴۰۳ ساعت ۱۷ به مدت ۱ روز 🌍آنلاین و در سبک Jeopardy 🕵️موضوعات: وب، Pwn، رمزنگاری، مهندسی معکوس، جرم‌یابی 🎯مناسب برای همه با هر سطح دانشی!
10
1
71
5,568
Last night, we had a discussion about integer overflow and arithmetic-related bugs. Thanks to the C++26 standard and the numeric library, you can now apply saturation arithmetic to the int data type. Part 1 #cpp #cpp26
1
3
701
more replies
This saturation value is typically the minimum or maximum possible value for the given data type. To use saturation arithmetic, you simply need to include the <numeric> header and use the appropriate functions based on your needs. Part 3
1
3
219
The four main functions are: add_sat sub_sat mul_sat div_sat saturate_cast Part 4
3
179
Mohammad retweeted
Sinaei@Intel80x862 Jan 2025
The first HyperDbg release of 2025 is out! 🎉 This version (v0.12) introduces commands for PCI/PCI-e device tree enumeration and IDT dumping, plus many bug fixes. Huge thanks to @0Xiphorus, @reodus_, @binophism & other contributors! 🔗 Check it out: github.com/HyperDbg/HyperDbg…
3
35
2
91
9,993
Deep Dive on #stuxnet Weapon binophism.github.io/posts/st… #ICS #scada #malware

Deep Dive on Stuxnet Weapon Part 1

In this article, we delve into the analysis of Stuxnet, a malware that captured the attention of malware analysts and security experts for years, particularly …

binophism.github.io
2
138
Building a Virtual Machine in C
Virtual Machine in C

ALT Virtual Machine in C

7
178
5
2,525
5,652,149
Lateral Movement via WMI and Threat Hunting Techniques Part 2.1 binophism.github.io/posts/wm… #redteam #wmi

Lateral Movement via WMI and Threat Hunting Techniques Part 2.1

Windows Management Instrumentation (WMI) is a powerful management tool in Windows that allows remote execution of commands and data collection without the need …

binophism.github.io
110
BTW, I wrote a blog post about memory management, virtual memory and paging concepts : blog.reodus.com/posts/memory…
3
58
341
22,689
Lateral Movement via WMI and Threat Hunting Techniques Part 1 binophism.github.io/posts/wm… #redteam #blueteam

Lateral Movement via WMI and Threat Hunting Techniques Part 1

Windows Management Instrumentation (WMI) is a powerful management tool in Windows that allows remote execution of commands and data collection without the need …

binophism.github.io
1
1
3
207
Implement Unique Pointer in C A unique pointer is a smart pointer that owns and manages another object through a pointer and disposes of that object when the unique pointer goes out of scope. You can read this in detail here: mohitmishra786.github.io/che…
Unique Pointer in C

ALT Unique Pointer in C

13
97
4,663
We deleted a post about Microsoft introducing Python into Microsoft Office 365 Excel. We initially said it would aid initial access malware. We didn't read the security considerations segment because we didn't believe Microsoft would care. We were wrong. It's all over
29
92
8
1,655
77,730
یه هکر ممکنه بخاطر ناآگاهی مردم در طول زندگیش با توهین‌های مختلفی روبه‌رو بشه اما کاری که #شاپرک با برگزاری مسابقه CASH24 کرد توهین به شعور جامعه امنیت سایبری ایران بود ماجرا چیه؟ فکر کن که روز کنکور وقتی که دفترچه آزمون رو پخش کردن، بعد از حل چندتا سوال متوجه میشی که... 1/
11
35
6
971
212,753
Load more