Just a guy who likes anime, fighting games, hypervisors and reverse engineering. Member of @the_secret_club. Do not DM me about game cheats.

Joined April 2020
While researching @kaspersky's components, I've decided to write a fun project that makes possible hooking system calls from your own driver by interfacing with its hypervisor: github.com/iPower/KasperskyH…
13
78
1
219
iPower retweeted
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh. code available at github.com/H4vC/oh-my-uefPi
3
17
2
80
9,061
As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! 🥳 Details and links below ⬇️
10
73
1
379
20,506
iPower retweeted
Love these stories. 20 years ago I encountered ArtMoney for the first time, 18 years ago I copied a C# aimbot from patrickssj6(?), all the way to now… Game hacking, especially through the growth and advancement of modern tech, will teach you so many things.
Trying to hack video games at 11 years old for in game purchases is what got me into reverse engineering today. What a journey.
7
25
2
259
15,599
iPower retweeted
github.com/binsnake/cobra has been updated with more performance improvements and extended formal verification. Build times when used as a dependency has also been improved. Grab it on crates.io @ cobra-mba !
1
2
14
1,368
iPower retweeted
Can you read all of these without your blood pressure rising? “load-bearing”, “golden path”, “golden files”, “golden artifacts”, “golden smoke tests”, “provenance”, “honest take”, “belt and suspenders”, “that’s the unlock”, “smoking gun”, “that’s not a bug, it’s a feature of the design”, “X isn’t the problem, it’s the symptom”, “not because X, but because Y”, “X, Y, but not Z. Sometimes W”, “X isn’t just Y anymore”, “no longer just X”, “less about X, more about Y”, “not X so much as Y”, “X, but for Y”, “load-bearing <literally anything>”, “the wrong shape”, “the same shape as”, “shaped like a”, “a config file in a trenchcoat”, “vibes in a trenchcoat”, “three functions in a trenchcoat”, “a spreadsheet in a trenchcoat”, “literally anything in a trenchcoat”, “this test is doing a lot of work”, “that comma is doing a lot of work”, “real work”, “the word 'should' is doing a lot of heavy lifting”, “this abstraction is earning its keep”, “this function pulls its weight”, “the duplication is load-bearing, not loose”, “the coupling is intentional, not accidental”, “the seam between”, “cutting along the seam”, “a natural seam”, “the grain of the codebase”, “against the grain of the API”, “the codebase wants to (wants to WHAT?)”, “the type system is telling you”, “dead code walking”, “zombie config”, “the function outlived its purpose”, “the name no longer matches the behavior”, “the compiler is trying to tell you”, “listen to what the code is telling you”, “the tests are screaming”, “this code smells like”, “the blast radius of this”, “the gravity of the module”, “orbiting the real issue”, “dancing around the actual fix”, “the fix is hiding in plain sight”, “the bug was hiding in”, “the quiet part”, “saying the quiet part out loud”, “half right, and the half that (more clanker rambling)”, “quietly load-bearing”, “quietly doing the heavy lifting”, “silently holding everything together”, “held together with hope”, “held together by convention”, “one refactor away from collapse”, “a Jenga tower of dependencies”, “a house of cards”, “the workaround became the architecture”, “the hack calcified”, “fossilized decisions”, “archaeological layers of the codebase”, “code archaeology”, “git blame archaeology”, “the sediment of past decisions”, “scar tissue in the X”, “the codebase has memory”, “the ghosts of a previous design”, “the foundation is sand”, “built on quicksand”, “the scaffolding became the building”, “haunted by an old abstraction”, “the vestigial parameter”, “an appendix of the API”, “the map has drifted from the territory”, “the docs are fan fiction at this point”, “the README is aspirational”, “the comment is a lie waiting to happen”, “the type signature is a promise the function doesn’t keep”, “the interface writes a check the implementation can’t cash”, “actually let me”, “actually let me”, “actually let me”, “actually let me”, “actually I think”, “actually let me”, “actually let me”, “Let me write this”, “actually let me” Me neither.
72
63
17
988
61,396
iPower retweeted
There's a lot of misinformation and panic going around about the Windows GDID (Global Device ID), let's talk about what it actually is. 🧵
> Peter Stokes > Scattered Spider guy > Arrested > Microsoft helps FBI > Read court documents > Page 12 > Microsoft tracks Stokes from GDID > Microsoft Global Device Identifier (GDID) > Stokes used Windows > Page 34 > GDID assigned to each OS install > GDID unique to each device > GDID only change if OS wiped > Stokes GDID 6755467234350028 > GDID reported internet activity to Microsoft > GDID showed Stokes using Ngrok > GDID reported Stokes IP address > GDID showed Stokes web activity > GDID showed timestamps of web activity > GDID mapped with video game activity > GDID showed games played > GDID undocumented > GDID only mentioned in one MSDN document > Azure UCDOStatus > Azure Monitor Logging
29
354
19
3,143
334,107
iPower retweeted
Ending the Fable experiment here. After 6 days and ~1400$ in Anthropic subs, we have Py3.14 JIT codegen and pon package-manager! (12,578$ @ API pricing) 1/x Although not 100% conformant, numpy working seamlessly is pretty impressive, esp. considering the wheel installation itself also required it to get meson/Cython working.
Can't use fable for work (sec), but I really wanted to push it's limits, so went with: > Write an AoT compiler for Python 3.14 in Rust with GreenTea GC, make no mistakes. We're 150 agents & 2 days in, it's going pretty OK ngl.
14
10
6
308
56,079
Here's the last IDA 9.4 pre-release teaser... We've significantly improved Swift binary analysis. In this blog, we're focusing on two different improvements: 1️⃣ Proper modelling of the Swift ABI 2️⃣ Proper typing of Swift runtime functions 👉 hex-rays.com/blog/ida-9.4-im…
4
9
60
5,131
New video: creating COM objects with the class moniker. Most of you know CoCreateInstance. Here is another way: class moniker. I walk through what the class moniker is, how the registry resolves the clsid: prefix to an implementation in combase.dll, and then rebuild the whole thing manually with MkParseDisplayName and IMoniker::BindToObject. youtu.be/P-L-gTjbtSI
1
41
170
15,936
I often need to explore Windows kernel crashdumps when I'm on Linux/macOS. WinDbg unfortunatelly doesn't work in Wine. So... I did a thing. It's multiplatform - doesn't depend on dbgeng.dll nor DIA. WinDbg-flavored. And it's fast. Really fast. github.com/vmi-rs/ephemera
6
73
392
27,115
iPower retweeted
I decided to commit another part to the Applied Reverse Engineering series with an article diving into rolling your own primitive tracer for discrete purposes; coupled with an analysis on outrunning integrity checks. revers.engineering/applied-r…
6
31
116
13,679
I'm adding Hyper-V (using the Windows Hypervisor Platform) as emulation backed to Sogen, my Windows userspace emulator: While providing slightly less analytical functionality, it should be a game changer in terms of speed 🥳 sogen.dev
5
27
1
230
29,979
Started a blog series on writing a minimal ARM hypervisor from scratch — boots as a UEFI app, claims EL2, identity-maps everything through Stage 2. Chapter 0 just dropped: ARM vs x86 virtualization, UEFI internals, EDK2 setup, first app at EL2. 0xabe.io/hypervisor/arm/2026…
2
52
230
13,657
iPower retweeted
Dropping some tooling to assist with Windows RE (or any really); bulk download modules across all versions, search for call chains from references, immediates, instructions, etc. Has been useful for mass-analysis, cross-version diffing, variant analysis, and just generally locating candidates for more thorough investigation (ioctl dispatch, rpc handlers/chains, what functions eventually call a desired target). github.com/daaximus/ida-reac…
1
46
214
16,386
TIL FILE_READ_ACCESS is not mandatory to map a SEC_IMAGE into memory.
2
18
104
10,873
My new hobby: Asking AI the same question over and over again, and looking at the results. Here's an example - I've asked gemini-2.5-flash 100 times to add two large numbers. It's really undecided. The correct answer is not there btw.
7
21
134
18,108
Yeah, @Google my primary email created in 2004 and used daily for 22 years is a bot? I'm now locked out of +450 other websites including my bank, work and github which use it for MFA and have to wait several days before a human reviews the appeal?🤔🤢
3
16
1,859