Published articles02
Rust-Based Hypervisors for Memory Introspection and Reverse Engineering
Research notes comparing illusion-rs and matrix-rs: EPT hooks, early-boot and runtime introspection, instruction replay, and detection trade-offs.
Tickling VMProtect with LLVM: Lifting, Exploration, and Optimization
A complete journey from virtualized x64 code to readable LLVM IR: lifting VMProtect handlers, exploring control flow, and building a custom optimization pipeline.
Follow new publications via RSS.