Reverse engineer & programmer
Brazil
Joined May 2021
- Tweets82
- Following333
- Followers345
- Likes635
ToCode new release now decompiles APKs and .NET, fully supports Binary Ninja (headless, MCP, RPC), and exports whole folders, linking binaries together with rich JSON for agents.
It's also available at PyPi :)
github.com/buzzer-re/tocode
I've added support for APK files using ASC (github.com/MG1937/ASC). If the app has native libraries, it will recursively decompile them too (useful for protectors).
Here’s a cool idea for working with coding agents when performing RE, export binaries as source code. It’s a simple idea that fits well for local inference.
It’s also a good approach for building oracles to ask specific questions about the binary itself
github.com/buzzer-re/ToCode
Here’s a cool idea for working with coding agents when performing RE, export binaries as source code. It’s a simple idea that fits well for local inference.
It’s also a good approach for building oracles to ask specific questions about the binary itself
github.com/buzzer-re/ToCode
v1.2 is out github.com/buzzer-re/Rikugan…
With new features like the research mode and the bulk function renamer, check it out!
Rikugan v1.1 is out!
I've worked on feedbacks and added new features:
- MCP/Skills import from Claude Code/Codex
- Profiles - control what gets sent to the LLM
- Hardened security - anti-LLM evasion, profile-aware filtering
Website/Docs: rikugan.reversing.codes
Release notes: github.com/buzzer-re/Rikugan…
I've also updated AGENTS.md and added DEVELOPMENT.md with best practices and development guidelines.
Buzzer retweeted
I ported Linux to the PS5 and turned it into a Steam Machine. Running GTA 5 Enhanced with Ray Tracing. 🤯
I decided to try out agentic coding/reversing, so I’m releasing a project that assists with reverse engineering in both Binja and IDA Pro. It’s an agent, not an MCP, that support multiple providers, it has some interesting features such as code exploration
github.com/buzzer-re/Rikugan
Interesting feature is the code exploration mode, directly inspired on how agents tackle large projects: plan, explore and summarize to build context
To assist this, it uses subagents with a single task to perform
Buzzer retweeted
My new article, “Ryūjin – Writing a Bin2Bin Obfuscator from Scratch for Windows PE x64 and Fully Deobfuscating It,” covers in detail the creation of a own Bin2Bin obfuscator tool, named “Ryūjin". Check it out:
keowu.re/posts/Ry%C5%ABjin--…
I've started to document a few of my projects, starting on that research on how an ELF injector would work on the PS5. It has interesting information about some FreeBSD's kernel data structures as well a glance of modern console security technologies
reversing.codes/posts/PlaySt…
Here is something that I've been working/using in my free time:
github.com/buzzer-re/YoRHa
Buzzer retweeted
Decided to publish PPPwn early. The first PlayStation 4 Kernel RCE. Supporting FWs upto 11.00.
github.com/TheOfficialFloW/P…
Buzzer retweeted
The PS4 (up to FW 11.00) and PS5 (up to FW 8.20) were vulnerable to CVE-2006-4304: hackerone.com/reports/217792…. I'll share details about successful exploitation at TyphoonCon.
 🌪️ PlayStation 4 Kernel RCE will be presented by @theflow0 at #TyphoonCon24!
Early bird tickets are now on sale: typhooncon.com/playstation-4…
Buzzer retweeted
We're revealing details of an obscure debugging feature in the Apple A12-A16 SoC’s that bypasses all of the hard-to-hack hardware-based memory protections on new iPhones. Its not used by the firmware and we don't know how the attackers found out about it. securelist.com/operation-tri…
Buzzer retweeted
I got time to update a draft that should've been published long ago. Here is a fun PG-compliant hooking mechanism, and the example covered in the article is system-wide SYSCALL hooks in a PG-compliant manner.
revers.engineering/fun-with-…
Buzzer retweeted
Check it out, it's tmp.0ut Volume 3!
tmpout.sh/3/
ALT screenshot of the tmp.0ut Vol 3 table of contents
Buzzer retweeted
My write-up for the @kaspersky challenge from @ekoparty #CTF is online. This was very nice challenge - #network traffic analysis, exploitation, #malware, #reverseengineering and #crypto
malwarelab.eu/posts/ekoparty…
#EKOPARTYCTF #networksecurity #malwareanalysis #cyberchef
ALT TCP Stream with exploitation of the login to the corporate server
ALT Analysis of shellcode in Cutter - XORing the rest of payload with 'U'
ALT RC4 encryption of exfiltrated data
ALT Decryption of the RC4-encrypted data in CyberChef