fG! @osxreverser

Know a thing or two about Reverse Engineering and Economics. Love 911s with three pedals and natural aspirated engines. reverse.put.as Joined March 2011

Tweets

615
Followers

12K
Following

792
Likes

23

Pedro Umbelino @kripthor

6 days ago

So… I was hacked. Pwned. Big time. And I’m not kidding. It turned out to be the very same malware used in massive DDoS campaigns against DeepSeek and Twitter (erm… X). It was RapperBot... I was angry with me and with the malware. Honestly, more with me than with the malware.…

8 20 112 17K 68

fG! @osxreverser

4 weeks ago

“It’s the certificates, stupid!” A quick analysis into the Phrack #72 APT Down code signing certificates. Has South Korea been backdoor pounded for the last two decades? reverse.put.as/2025/08/11/its…

0 3 8 1K 4

fG! @osxreverser

4 months ago

Anyone knows the meaning of bit 26 in Aarch64 LDRAA PAC enabled instruction? Arm architecture manuals show it as unallocated, but I have arm64 macOS binary with it. IDA can disassemble it but binary ninja aarch64 disassembler library not. Can’t find any info about it :-(

1 0 5 815 1

fG! @osxreverser

5 months ago

Quick working Erlang/OTP PoC exploit written mostly by chatgpt. You don’t get feedback but command is executed. Easy to weaponize very fast and in creative or not ways :-) H4x th3 w0rld! Go patch now! gist.github.com/gdbinit/e08e95…

0 0 4 713 3

fG! @osxreverser

5 months ago

If you have Erlang SSH vulnerable devices drop everything you are doing and go patch or firewall it. ChatGPT can build working exploit with minimal coaching! This is going to be a shit show over the next days :-)

0 1 6 805 0

fG! @osxreverser

5 months ago

Clownpertino - A simple macOS debugger detection trick Pretty sure someone using this one since it’s so easy but I haven’t seen it in the wild. Just some Monday lulz read while the stock markets burn :P reverse.put.as/2025/04/04/clo…

0 27 122 8K 42

fG! @osxreverser

5 months ago

Ok I’m uber pissed off to the point of trying it here. I can’t get the path of the main binary in lldb image notifier breakpoint when launching a binary via posix spawn and task for pid control in macOS 15.4. This worked before this update. Any ideas why? Other images work.

0 0 0 516 1

fG! @osxreverser

5 months ago

Cracking the Crackers Reversing the TNT team macOS crack library to understand if there is malware due to patching of pro-Ukraine support messages. With deobfuscators and dumper tools pushed to Github. Have fun :-] reverse.put.as/2025/03/13/cra…

2 40 118 9K 53

fG! @osxreverser

7 months ago

If you care and want to start understanding wtf happened, wtf is going, and wtf will be the future then this might be the most important and interesting book you read this year. LLM bullshit isn’t dangerous, social media engagement algorithms are the true danger. Go read!

1 0 3 667 4

Download Image

fG! @osxreverser

7 months ago

Miss you @miaubiz !!! Your old defcon slides just gave me the missing piece for my current IDA problem 😘

1 0 6 885 1

fG! @osxreverser

7 months ago

Hey journalist dumbasses, don’t forget to mention these guys ;-)

1 0 5 2K 2

Download Image

fG! @osxreverser

9 months ago

Did a presentation today at local 0xOpoSec meetup about Flare-On challenge #5. Slides and emulator code linked at reverse.put.as/2024/11/29/fla…. It’s a fun challenge as an intro to RE and memory forensics.

0 5 48 3K 18

fG! @osxreverser

a year ago

2 8 63 10K 19

Download Image

fG! @osxreverser

a year ago

Enjoy the old sch00l lulz! :-) Fuck You Ilfak - A IDA Pro 9.0 Beta 2 macOS x86 Fix Loader github.com/gdbinit/fuckyo…

2 10 63 8K 42

fG! @osxreverser

a year ago

I couldn’t find answers to my questions so I found out how the hell there is Ruby and Rust repositories in Go’s checksum database. Maybe a useless post but this is how you can do it with any data you want… “Abusing Go's infrastructure” reverse.put.as/2024/05/24/abu…

0 1 7 1K 1

fG! @osxreverser

a year ago

50 years of freedom! Fuck the fascists and nazis all over the world, Portugal in particular. 25 de Abril sempre, fascismo nunca mais!

1 1 9 2K 0

Download Image

fG! @osxreverser

a year ago

gdb is also linked against liblzma… the sshd check exists (most probably) because the blast radius of xz backdoor is most probably epic ;-)

1 0 4 1K 2

fG! @osxreverser

2 years ago

3 1 2 2K 0

fG! @osxreverser

2 years ago

Xmas release. If you happen to be a lldbinit user, I’ve just put out v3.1 beta with disassembly comments and breakpoint sessions new features (and other bugfixes). Please submit issue if you use them and find something broken (or ideas/suggestions). github.com/gdbinit/lldbin…

1 7 44 6K 10

fG! @osxreverser

2 years ago

Slides for today’s presentation about Flare-On 2023 challenge #12 -> github.com/gdbinit/flare-… . I’ll upload the code for this challenge and others later. Maybe write a long blogpost if I go full stupid. It’s a fun challenge for the less experienced.