
Just a guy who likes anime, fighting games, hypervisors and reverse engineering. Member of @the_secret_club. Do not DM me about game cheats.
Joined April 2020
- Tweets558
- Following161
- Followers1.9K
- Likes771
iPower retweeted
New uefi chain loader, now with llm's built right in, why wait for a DE, when you proompt right away. loading omarchy @dhh.
code available at github.com/H4vC/oh-my-uefPi
iPower retweeted
As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! 🥳
Details and links below ⬇️

ALT We are happy to introduce the official IDA MCP server! This free and open source software connects your IDA installation with AI agents, enabling them to disassemble, decompile, and support reverse engineering tasks. It works great with models like Gemini, Qwen, or Opus using familiar harnesses like Claude Code, Codex, or Pi. Across our internal malware analysis-focused benchmark, IDA MCP’s “code mode” architecture reduced token consumption by approximately 20% compared to popular alternatives.
iPower retweeted
github.com/valeria-org/bitwr…
Also supports simplifying MBA, with better results than CoBRA, as well as properly handling its edge cases.
Love these stories. 20 years ago I encountered ArtMoney for the first time, 18 years ago I copied a C# aimbot from patrickssj6(?), all the way to now… Game hacking, especially through the growth and advancement of modern tech, will teach you so many things.
iPower retweeted
github.com/binsnake/cobra has been updated with more performance improvements and extended formal verification. Build times when used as a dependency has also been improved. Grab it on crates.io @ cobra-mba !
Can you read all of these without your blood pressure rising?
“load-bearing”, “golden path”, “golden files”, “golden artifacts”, “golden smoke tests”, “provenance”, “honest take”, “belt and suspenders”, “that’s the unlock”, “smoking gun”, “that’s not a bug, it’s a feature of the design”, “X isn’t the problem, it’s the symptom”, “not because X, but because Y”, “X, Y, but not Z. Sometimes W”, “X isn’t just Y anymore”, “no longer just X”, “less about X, more about Y”, “not X so much as Y”, “X, but for Y”, “load-bearing <literally anything>”, “the wrong shape”, “the same shape as”, “shaped like a”, “a config file in a trenchcoat”, “vibes in a trenchcoat”, “three functions in a trenchcoat”, “a spreadsheet in a trenchcoat”, “literally anything in a trenchcoat”, “this test is doing a lot of work”, “that comma is doing a lot of work”, “real work”, “the word 'should' is doing a lot of heavy lifting”, “this abstraction is earning its keep”, “this function pulls its weight”, “the duplication is load-bearing, not loose”, “the coupling is intentional, not accidental”, “the seam between”, “cutting along the seam”, “a natural seam”, “the grain of the codebase”, “against the grain of the API”, “the codebase wants to (wants to WHAT?)”, “the type system is telling you”, “dead code walking”, “zombie config”, “the function outlived its purpose”, “the name no longer matches the behavior”, “the compiler is trying to tell you”, “listen to what the code is telling you”, “the tests are screaming”, “this code smells like”, “the blast radius of this”, “the gravity of the module”, “orbiting the real issue”, “dancing around the actual fix”, “the fix is hiding in plain sight”, “the bug was hiding in”, “the quiet part”, “saying the quiet part out loud”, “half right, and the half that (more clanker rambling)”, “quietly load-bearing”, “quietly doing the heavy lifting”, “silently holding everything together”, “held together with hope”, “held together by convention”, “one refactor away from collapse”, “a Jenga tower of dependencies”, “a house of cards”, “the workaround became the architecture”, “the hack calcified”, “fossilized decisions”, “archaeological layers of the codebase”, “code archaeology”, “git blame archaeology”, “the sediment of past decisions”, “scar tissue in the X”, “the codebase has memory”, “the ghosts of a previous design”, “the foundation is sand”, “built on quicksand”, “the scaffolding became the building”, “haunted by an old abstraction”, “the vestigial parameter”, “an appendix of the API”, “the map has drifted from the territory”, “the docs are fan fiction at this point”, “the README is aspirational”, “the comment is a lie waiting to happen”, “the type signature is a promise the function doesn’t keep”, “the interface writes a check the implementation can’t cash”, “actually let me”, “actually let me”, “actually let me”, “actually let me”, “actually I think”, “actually let me”, “actually let me”, “Let me write this”, “actually let me”
Me neither.
iPower retweeted
There's a lot of misinformation and panic going around about the Windows GDID (Global Device ID), let's talk about what it actually is. 🧵
> Peter Stokes
> Scattered Spider guy
> Arrested
> Microsoft helps FBI
> Read court documents
> Page 12
> Microsoft tracks Stokes from GDID
> Microsoft Global Device Identifier (GDID)
> Stokes used Windows
> Page 34
> GDID assigned to each OS install
> GDID unique to each device
> GDID only change if OS wiped
> Stokes GDID 6755467234350028
> GDID reported internet activity to Microsoft
> GDID showed Stokes using Ngrok
> GDID reported Stokes IP address
> GDID showed Stokes web activity
> GDID showed timestamps of web activity
> GDID mapped with video game activity
> GDID showed games played
> GDID undocumented
> GDID only mentioned in one MSDN document
> Azure UCDOStatus
> Azure Monitor Logging
Ending the Fable experiment here.
After 6 days and ~1400$ in Anthropic subs, we have Py3.14 JIT codegen and pon package-manager! (12,578$ @ API pricing)
1/x Although not 100% conformant, numpy working seamlessly is pretty impressive, esp. considering the wheel installation itself also required it to get meson/Cython working.
iPower retweeted
Here's the last IDA 9.4 pre-release teaser...
We've significantly improved Swift binary analysis. In this blog, we're focusing on two different improvements:
1️⃣ Proper modelling of the Swift ABI
2️⃣ Proper typing of Swift runtime functions
👉 hex-rays.com/blog/ida-9.4-im…
iPower retweeted
Striga: Lifting x86 to LLVM IR with Python by @mrexodia
secret.club/2026/05/21/strig…
iPower retweeted
New video: creating COM objects with the class moniker.
Most of you know CoCreateInstance.
Here is another way: class moniker. I walk through what the class moniker is, how the registry resolves the clsid: prefix to an implementation in combase.dll, and then rebuild the whole thing manually with MkParseDisplayName and IMoniker::BindToObject.
youtu.be/P-L-gTjbtSI
iPower retweeted
I often need to explore Windows kernel crashdumps when I'm on Linux/macOS.
WinDbg unfortunatelly doesn't work in Wine.
So... I did a thing. It's multiplatform - doesn't depend on dbgeng.dll nor DIA. WinDbg-flavored.
And it's fast. Really fast.
github.com/vmi-rs/ephemera
iPower retweeted
Started a blog series on writing a minimal ARM hypervisor from scratch — boots as a UEFI app, claims EL2, identity-maps everything through Stage 2.
Chapter 0 just dropped: ARM vs x86 virtualization, UEFI internals, EDK2 setup, first app at EL2.
0xabe.io/hypervisor/arm/2026…
Dropping some tooling to assist with Windows RE (or any really); bulk download modules across all versions, search for call chains from references, immediates, instructions, etc. Has been useful for mass-analysis, cross-version diffing, variant analysis, and just generally locating candidates for more thorough investigation (ioctl dispatch, rpc handlers/chains, what functions eventually call a desired target).
github.com/daaximus/ida-reac…
iPower retweeted
My new hobby: Asking AI the same question over and over again, and looking at the results.
Here's an example - I've asked gemini-2.5-flash 100 times to add two large numbers.
It's really undecided.
The correct answer is not there btw.
iPower retweeted
Yeah, @Google my primary email created in 2004 and used daily for 22 years is a bot? I'm now locked out of +450 other websites including my bank, work and github which use it for MFA and have to wait several days before a human reviews the appeal?🤔🤢
iPower retweeted
Try the ask_ida/c++ GPT [ chat.openai.com/g/g-VgbIr9TQ… ] for IDA SDK related questions in C/C++.




























