Loading video...

Video Failed to Load

Go Home

Binlex deobfuscating polymorphic shellcode with LLVM. Assemble shellcode Lift to LLVM IR Run optimization passes Emit optimized object code Disassemble recovered shellcode Polymorphism is completely gone.

c3rb3ru5d3d53c's profile picture

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт

26,600 subscribers

14,124 views • 5 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

4 Comments

Voidwalker's profile picture
Voidwalker4 months ago

You removed the polymorphic 👀

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт's profile picture
ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт4 months ago

Yes :)

red plait's profile picture
red plait5 months ago

github?

red plait's profile picture
red plait5 months ago

thank you

Related Videos

A demo of how fast binlex is lifting kernel32.dll functions to LLVM.
0:50

A demo of how fast binlex is lifting kernel32.dll functions to LLVM.

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт

13,532 views • 6 months ago

11 hours of reverse engineering, exploit dev, rop chains, custom shellcode, code caves. In 11 minutes.
11:01

11 hours of reverse engineering, exploit dev, rop chains, custom shellcode, code caves. In 11 minutes.

tetsuo

53,220 views • 4 months ago

11 hours of reverse engineering, exploit development, ROP chains, custom shellcode, and code caves, done in 11 minutes.
11:01

11 hours of reverse engineering, exploit development, ROP chains, custom shellcode, and code caves, done in 11 minutes.

tetsuo

67,650 views • 2 months ago

Dynamic HTTP(S) Payload Stager : credits AndreCrafts Storing/Reading shellcode in .bin files with C++ :
0:30

Dynamic HTTP(S) Payload Stager : credits AndreCrafts Storing/Reading shellcode in .bin files with C++ :

Binni Shah

22,339 views • 1 year ago

Inspired by Grzegorz Tworek, I created PoC: EXE-or-DLL-or-ShellCode that can be: Executed as a normal #exe Loaded as #dll + export function can be invoked Run via "rundll32.exe" Executed as #shellcode right from the DOS (MZ) header that works as polyglot stub
0:59

Inspired by Grzegorz Tworek, I created PoC: EXE-or-DLL-or-ShellCode that can be: Executed as a normal #exe Loaded as #dll + export function can be invoked Run via "rundll32.exe" Executed as #shellcode right from the DOS (MZ) header that works as polyglot stub

Jiří Vinopal

43,489 views • 2 years ago

As promised, here it is! Offensive coding with C++ episode 1 - Building a custom shellcode loader: #cybersecurity #coding #C++ #Cpp #WindowsAPIs
0:45

As promised, here it is! Offensive coding with C++ episode 1 - Building a custom shellcode loader: #cybersecurity #coding #C++ #Cpp #WindowsAPIs

Lsec

39,763 views • 3 years ago

🛠️ AsmLdr Shellcode loader for Windows x64 environments. Execute encrypted payloads while minimizing detection by advanced antivirus software, endpoint detection and response (EDR) systems, sandboxes, and debuggers Try:
0:54

🛠️ AsmLdr Shellcode loader for Windows x64 environments. Execute encrypted payloads while minimizing detection by advanced antivirus software, endpoint detection and response (EDR) systems, sandboxes, and debuggers Try:

International Cyber Digest

13,623 views • 1 year ago

We’re excited to launch LLZK, an open-source intermediate representation (IR) for zero-knowledge circuits. Think LLVM, but for ZK. Built by Veridise and supported with a grant from the Ethereum Foundation, LLZK is now live on GitHub. Thread 🧵 1/4
2:22

We’re excited to launch LLZK, an open-source intermediate representation (IR) for zero-knowledge circuits. Think LLVM, but for ZK. Built by Veridise and supported with a grant from the Ethereum Foundation, LLZK is now live on GitHub. Thread 🧵 1/4

Veridise

11,048 views • 1 year ago

YOUNG IRANIAN GIRLS taught how to ASSEMBLE, DISASSEMBLE AK-47s as tensions with US reach BREAKING POINT
0:26

YOUNG IRANIAN GIRLS taught how to ASSEMBLE, DISASSEMBLE AK-47s as tensions with US reach BREAKING POINT

RT

84,958 views • 5 months ago

really proud of this one, i was stuck a while on solving the filesystem persistence issue which all the previous citrix research were pointing to "process continuity" as the solution. but the memory was so much smashed during the exploitation that i just couldn't achieve continuity LLMs didn't have anything novel to offer and kept saying suggesting the same technique (i'm probably using them wrong) but when i dig deeper on why netscaler reboots, i thought about this idea (after reversing the watchdog) since its the signal handlers that are causing the reboot to happen by catching the SIGSEGV, why not instead use the shellcode to neutralize the signal handlers, it felt really cool when it worked, i did some googling after but couldn't see any blog/writeup talking about it. if anyone has used *sigaction* syscall for this purpose in their shellcode before, let me know so i can read your writeup. anyway, enjoy 💛
0:31

really proud of this one, i was stuck a while on solving the filesystem persistence issue which all the previous citrix research were pointing to "process continuity" as the solution. but the memory was so much smashed during the exploitation that i just couldn't achieve continuity LLMs didn't have anything novel to offer and kept saying suggesting the same technique (i'm probably using them wrong) but when i dig deeper on why netscaler reboots, i thought about this idea (after reversing the watchdog) since its the signal handlers that are causing the reboot to happen by catching the SIGSEGV, why not instead use the shellcode to neutralize the signal handlers, it felt really cool when it worked, i did some googling after but couldn't see any blog/writeup talking about it. if anyone has used *sigaction* syscall for this purpose in their shellcode before, let me know so i can read your writeup. anyway, enjoy 💛

SinSinology

16,309 views • 2 months ago

solx is here. A modern Solidity compiler built on LLVM, enabling advanced optimizations like caching storage variables, loop unrolling, and constant folding. Built for Ethereum. Watch the video for how to use solx via Foundry and compare the gas consumption against solc:
2:27

solx is here. A modern Solidity compiler built on LLVM, enabling advanced optimizations like caching storage variables, loop unrolling, and constant folding. Built for Ethereum. Watch the video for how to use solx via Foundry and compare the gas consumption against solc:

ZKsync Developers (∎, ∆)

29,419 views • 1 year ago

Announcing EllesmereUI: WoW's Most Intuitive UI Suite COMPLETELY FREE and Performance Optimized, EllesmereUI combines the most intuitive UI editor in WoW with extreme performance optimization and endless customization. Bring your UI to life like never before. Install:
1:25

Announcing EllesmereUI: WoW's Most Intuitive UI Suite COMPLETELY FREE and Performance Optimized, EllesmereUI combines the most intuitive UI editor in WoW with extreme performance optimization and endless customization. Bring your UI to life like never before. Install:

Ellesmere

421,976 views • 7 months ago

🪣 RustFS: high-performance, distributed object storage system built in Rust - offers full S3 compatibility, is completely open-source, and is optimized for data lakes, AI, and big data workloads
0:31

🪣 RustFS: high-performance, distributed object storage system built in Rust - offers full S3 compatibility, is completely open-source, and is optimized for data lakes, AI, and big data workloads

AstraKernel 💫

34,179 views • 10 months ago

"Optimized" FBT is Gone... Introducing Rollin 20's
0:31

Sensitive content

"Optimized" FBT is Gone... Introducing Rollin 20's

Half&Half_Madam

58,315 views • 18 days ago

AI Coding Agent for Hardware Optimized Code Diana AI hardware is still constrained by software. However, with reasoning models like Deepseek R1 or OpenAI o1 and o3, AI could generate hardware-optimized code that rivals—or surpasses—human CUDA code.
1:01

AI Coding Agent for Hardware Optimized Code Diana AI hardware is still constrained by software. However, with reasoning models like Deepseek R1 or OpenAI o1 and o3, AI could generate hardware-optimized code that rivals—or surpasses—human CUDA code.

Y Combinator

60,185 views • 1 year ago

🔥 DreamEngine revolutionizes image generation with its text-guided object fusion capabilities! The demo and code for Text Guided Object Fustion are released! Let's unlock the Imaginations! Run it locally now in: Paper:
0:27

🔥 DreamEngine revolutionizes image generation with its text-guided object fusion capabilities! The demo and code for Text Guided Object Fustion are released! Let's unlock the Imaginations! Run it locally now in: Paper:

Liang Chen

11,376 views • 1 year ago

Central region is either gone completely or completely gone.
0:57

Central region is either gone completely or completely gone.

Hon. Caleb Amisi, MP

206,982 views • 1 year ago

Junie can now run entirely on your machine, and it’s completely free to use. One command: /local. We picked and optimized the whole stack around the model: agent harness, model parameters, and inference engine. No tokens, no quota, no code ever leaving your machine.
1:29

Junie can now run entirely on your machine, and it’s completely free to use. One command: /local. We picked and optimized the whole stack around the model: agent harness, model parameters, and inference engine. No tokens, no quota, no code ever leaving your machine.

JetBrains

6,520,425 views • 1 month ago