Rust-Based Hypervisors for Memory Introspection and Reverse Engineering
Research notes comparing illusion-rs and matrix-rs: EPT hooks, early-boot and runtime introspection, instruction replay, and detection trade-offs.
Eitan Elbaz / Security research
Understanding
what’s underneath.
Exploring the internals of software.
Research, reverse engineering, and the details
that make complex systems make sense.
FROM COMPLEXITY TO CLARITY01 / 04
01 Observe ⌕
02 Lift ↗
03 Explore ⌘
04 Understand ✓
A closer look at how software works.
Notes from the workbench
Selected research
Tickling VMProtect with LLVM: Lifting, Exploration, and Optimization
A complete journey from virtualized x64 code to readable LLVM IR: lifting VMProtect handlers, exploring control flow, and building a custom optimization pipeline.
Disclosures
Published vulnerability findings, their impact, and the path to remediation.
02 / Selected workDocuments
Public designation letters and concise, redacted assessment summaries.
Behind the research
I’m Eitan.
I like looking closer.
This is my notebook for security research and reverse engineering: a place to share methods, explain findings, and keep the technical details in view.
More about me