Mike Hunhoff (@mehunhoff) header
Mike Hunhoff (@mehunhoff) profile picture

Mike Hunhoff

@mehunhoff

Husband • Cat Dog Dad • Reverse Engineer @Google

 Colorado, USA
Joined October 2012
  • Tweets387
  • Following379
  • Followers601
17Media
Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)Photo by Mike Hunhoff (@mehunhoff)
🎉 We’ve released capa v9.4 with 26 new rules and various performance improvements. Additionally, the standalone tool now supports Ghidra as a feature extraction backend. Check out the release for more details 👉 github.com/mandiant/capa/rel…
Image from Mike Hunhoff (@mehunhoff)
22
61
6,976
dnSpyEx now with a string references window 🥹
ElektroKill (@elektrokilldev) profile pictureElektroKill@elektrokilldevMay 14
The first release candidate of dnSpyEx 6.6.0 is now available for download. github.com/dnSpyEx/dnSpy/rel…
Release v6.6.0-rc1 · dnSpyEx/dnSpy

Release v6.6.0-rc1 · dnSpyEx/dnSpy

Uhmmm, how do I even make a release in 2026? I guess I'll just use AI. [20 minutes of fighting with AI later] I guess doing it manually will work too :D Speaking of AI... There will not be an o...

github.com
1
4
15
1,720
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tzApr 2
Speakeasy emulator v2.0.0b2 just dropped. Many more improvements by @williballenthin. Please provide feedback before we release v2 in the upcoming weeks. - pypi.org/project/speakeasy-e… - github.com/mandiant/speakeas…
speakeasy-emulator

speakeasy-emulator

Speakeasy malware emulation framework

pypi.org
27
86
7,171
Mike Hunhoff retweeted
Rasta Mouse (@_RastaMouse) profile picture
Rasta Mouse@_RastaMouse30 Oct 2025
The most 1337 AMSI bypass for the CLR ever.
Image from Rasta Mouse (@_RastaMouse)
4
36
338
22,675
After hours of Flutter AOT reversing, Dart object pool decoding & AES key derivation tracing, I became the first globally to crack DroidPass Full write-up reversethat.app/reverse-engi… #Android #AndroidSecurity #ReverseEngineering #CTF #Flutter #Dart #8ksec #DroidPass
Deep Dive: Reverse Engineering the DroidPass Flutter Password Vault (8ksec Challenge)

Deep Dive: Reverse Engineering the DroidPass Flutter Password Vault (8ksec Challenge)

A detailed walkthrough of how to statically reverse-engineer the DroidPass Flutter-based password vault challenge from 8ksec, uncovering its AES key derivation, IV generation, and encryption flaws.

reversethat.app
8kSec (@8kSec) profile picture8kSec
@8kSec22 Oct 2025
Nobody’s cracked this Android lab yet 🤯 Meet DroidPass: Ultimate Password Vault, a purposely flawed password manager hiding its base encryption key inside the APK. Your mission: statically reverse-engineer the app and extract the exact base key used to encrypt the password DB. Think you can be the first to break it? Drop a comment if you’re in. Winner gets ultimate bragging rights🔥 🔗 academy.8ksec.io/course/andr… #MobileSecurity #ReverseEngineering #AndroidSecurity #CTF
Image from 8kSec (@8kSec)
8
26
4,449
Just published my #flareon12 challenge 8 write-up Spent hours playing with Intel Pin (wrong path 😅), then switched to a bottom-up event-based approach using WinDbg TTD, x64dbg, ret-sync & IDA — felt like cracking old game trial licenses again 😄 🔗 reversethat.app/posts/flareo…
Flare-On 12 CTF 2025: Challenge 8 - FlareAuthenticator

Flare-On 12 CTF 2025: Challenge 8 - FlareAuthenticator

TL;DR CTF challenges like those in Flare-On provide excellent opportunities to refine reverse engineering techniques on obfuscated binaries. Challenge 8 from Flare-On 2025, “FlareAuthenticator”...

reversethat.app
15
1
54
5,487
Mike Hunhoff retweeted
june (@0x5cff3d) profile picture
june@0x5cff3d28 Oct 2025
completed #flareon12 this year, even with some slacking in between. my first set of writeups (for levels 1 to 6) are in the reply to this tweet. will be posting the rest in due time!
Image from june (@0x5cff3d)
1
3
50
2,824
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz28 Oct 2025
Here's how the obfuscation in #flareon12 challenge 7 looks like in source - all just junk code 🗑️
Image from Moritz (@m_r_tz)
Image from Moritz (@m_r_tz)
Image from Moritz (@m_r_tz)
4
8
113
9,061
Even a decade later, this is still one of the best references on malware analysis. I remember spending an entire summer studying this book religiously. I owe the start of my career to it. Waiting for the update @nostarch 🤓
Will (@_w177_) profile pictureWill
@_w177_25 Oct 2025
Had to check it out, @aylacroft 😆
Image from Will (@_w177_)
24
100
4
1,373
98,616
Mike Hunhoff retweeted
malware Owl (@malware_owl) profile picture
malware Owl
@malware_owl27 Oct 2025
Here are some new posts on #flareon12 ## Challenge 6 - Chain of Demands blog.0wl.sg/docs/y2025/oct/f… # Mainly focusing on Deobfuscation with Binja ## Challlenge 7 - The Boss Needs Help blog.0wl.sg/docs/y2025/oct/f… ## Challenge 8 - FlareAuthenticator blog.0wl.sg/docs/y2025/oct/f…

20251024115755 - BLG - Flare-on12 Chall 6 - Chain of Demands

A Crypto-Rev Challenge Writeup leading to Breaking of RSA

blog.0wl.sg
1
16
1
69
6,031
Well, I don't know where the official solutions for #flareon12 are, but mine are here ;) milanspinka.com/blog/ctf-wri… @Mandiant
5
7
1
51
9,639
Mike Hunhoff retweeted
nickharbour (@nickharbour) profile picture
nickharbour@nickharbour25 Oct 2025
That's a wrap #flareon12 read the official solutions and see the prize here: security.googlecloudcommunit…
FLARE-On 12 Challenge Solutions | Community

FLARE-On 12 Challenge Solutions | Community

The 12th annual FLARE-On contest has come to a close! It did not overstay its welcome at a new shorter run length of just four weeks; we still captured the hearts and minds of over 4,000 players. At...

security.googlecloudcommunity.com
4
43
143
14,257
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz24 Oct 2025
Looks like #flareon12 will have similar finisher numbers to last year. #flareon11 had 275 players that solved all levels. With 14 hours left we're at 295 players this year.
1
5
1
21
4,330
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz23 Oct 2025
Looking very much forward to all the #flareon12 write ups!
SuperFashi (@SuperFashi1) profile pictureSuperFashi@SuperFashi123 Oct 2025
ready for this year
Image from SuperFashi (@SuperFashi1)
2
11
2,649
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz23 Oct 2025
One day to go! #flareon12 Here's a breakdown of the current registered users and challenge solve counts.
Image from Moritz (@m_r_tz)
5
20
3,461
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz21 Oct 2025
3 days left for #flareon12 - keep pushing everyone! And also remember if you've solved challenge 7 you're in the top 10% of all players...
1
4
24
4,319
Mike Hunhoff retweeted
Moritz (@m_r_tz) profile picture
Moritz@m_r_tz20 Oct 2025
Congrats to the over 200 #flareon12 finishers! 4 days to go. Good luck to about 140/80/186 players on challenge 7/8/9 respectively and everyone else!
Image from Moritz (@m_r_tz)
3
16
3,781
preview: ida-cyberchef #idapro #cyberchef
Image from Willi Ballenthin (@williballenthin)
5
20
5
127
38,391
FLARE-VM just got a serious upgrade — new GUI, automated builds, and 288+ tools (with better IDA + Go support). The latest update brings: 🧰 Revamped installer ⚙️ New Python script for full VM automation 📚 (cont) bit.ly/48VetqY
Image from Google Cloud Security (@GoogleCloudSec)
109
3
399
70,971
Mike Hunhoff retweeted
VirusTotal (@virustotal) profile picture
VirusTotal@virustotal8 Oct 2025
Simpler Access for a Stronger VirusTotal We’re simplifying access to VirusTotal with clearer tiers and flexible options, keeping the platform open, collaborative, and built around our contributors. Read more: blog.virustotal.com/2025/10/…
Image from VirusTotal (@virustotal)
8
67
4
398
118,292
Load more