BlipsAndChitz🚀 (@Blips_and_Chitz) header
BlipsAndChitz🚀 (@Blips_and_Chitz) profile picture

BlipsAndChitz🚀

@Blips_and_Chitz

(Peter Garba) Software Security Expert @ Thales and passionated reverse engineer. Software De-Obfuscation and novel attacks

Joined January 2016
  • Tweets390
  • Following361
  • Followers678
56Media
Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)Photo by BlipsAndChitz🚀 (@Blips_and_Chitz)
Missed Total Commander on Linux so I built my own with the same look and feel on Linux and Windows github.com/pgarba/immc
Image from BlipsAndChitz🚀 (@Blips_and_Chitz)
2
5
698
New paper highlights SATURN, a framework we developed for automated malware deobfuscation! Researchers call it the "most promising method," proving it natively clears MBA masks, opaque predicates, and flattened code via LLVM IR + SMT 😎 jisp.spbstu.ru/userfiles/fil…
2
5
24
2,792
BlipsAndChitz🚀 retweeted
rev.ng (@_revng) profile picture
rev.ng
@_revng30 Jan 2025
Check out this interesting paper. We’re thinking about doing something similar! arxiv.org/abs/1909.01752
Image from rev.ng (@_revng)
5
32
1,989
BlipsAndChitz🚀 retweeted
RE//verse (@REverseConf) profile picture
RE//verse
@REverseConf29 Jan 2025
WebAssembly de-obfuscation with LLVM. Vikas Gupta & Peter Garba (@Blips_and_Chitz) reveal how to reverse Wasm obfuscation using compiler optimizations. Simplify complex code without pattern rules & tackle real-world scenarios. re-verse.sessionize.com/sess… #REverse2025 #Wasm #ReverseEngineering
Image from RE//verse (@REverseConf)
1
6
1
29
2,588
DeepSeek R1 is giving correct simplifications for several MBAs I tried. Really impressive!
Image from BlipsAndChitz🚀 (@Blips_and_Chitz)
6
536
BlipsAndChitz🚀 retweeted
RE//verse (@REverseConf) profile picture
RE//verse
@REverseConf15 Jan 2025
Ready to get out of the cold? Come to RE//verse and see some of our amazing lineup. re-verse.io/ Also stay tuned we're going to be announcing our 2 keynote speakers very soon!
RE//verse - Reverse Engineering Conference

RE//verse - Reverse Engineering Conference

RE//verse is a premier reverse engineering, vulnerability research, and malware analysis conference. More info on the next event coming soon.

re-verse.io
3
7
969
BlipsAndChitz🚀 retweeted
Tim Blazytko (@mr_phrazer) profile picture
Tim Blazytko
@mr_phrazer10 Jan 2025
The line-up for @REverseConf is impressive, but one talk I’m particularly excited about is from Vikas Gupta and @Blips_and_Chitz: “Standing on the Shoulders of Giants: De-Obfuscating WebAssembly using LLVM” re-verse.sessionize.com/sess…
Standing on the Shoulders of Giants: De-Obfuscating WebAssembly using LLVM

Standing on the Shoulders of Giants: De-Obfuscating WebAssembly using LLVM

WebAssembly (Wasm) is an increasingly popular compilation target, offering compact representation, efficient validation and compilation, and safe low to no-overhead execution. Wasm is popular not...

re-verse.sessionize.com
15
61
4,970
BlipsAndChitz🚀 retweeted
Phoronix (@phoronix) profile picture
Phoronix
@phoronix11 Dec 2024
How @AMD Is Taking Standard C/C++ Code To Run Directly On GPUs phoronix.com/news/AMD-Standa…
How AMD Is Taking Standard C/C++ Code To Run Directly On GPUs

How AMD Is Taking Standard C/C++ Code To Run Directly On GPUs

Back at the 2024 LLVM Developers' Meeting was an interesting presentation by AMD engineer Joseph Huber for how they have been exploring running common, standard C/C++ code directly on GPUs without...

phoronix.com
1
29
1
130
5,817
BlipsAndChitz🚀 retweeted
Thalium Team (@thalium_team) profile picture
Thalium Team@thalium_team25 Nov 2024
Reversing virtualized binaries is no easy task. Our intern Jack took on exploring automated devirtualization techniques, and presents in our latest blog post an efficient, modular, taint-based approach that leverages LLVM IR: blog.thalium.re/posts/llvm-p…

LLVM-powered deobfuscation of virtualized binaries

Virtualization is a powerful technique for code obfuscation, and reversing it can be challenging. In this post, we cover the work done during an internship on developing an automated devirtualization...

blog.thalium.re
45
1
149
11,946
BlipsAndChitz🚀 retweeted
Colton Skees (@ColtonSkees) profile picture
Colton Skees@ColtonSkees27 Sep 2024
(1) Decided to release the source code for my LLVM-based static binary analysis framework (github.com/Colton1skees/Dna). It implements, among other things, an iterative control flow graph reconstruction algorithm heavily inspired by SATURN, using Remill and Souper.
GitHub - Colton1skees/Dna: LLVM based static binary analysis framework

GitHub - Colton1skees/Dna: LLVM based static binary analysis framework

LLVM based static binary analysis framework . Contribute to Colton1skees/Dna development by creating an account on GitHub.

github.com
3
51
1
200
21,211
SLOT: SMT-LLVM Optimizing Translation Slides: llvm.org/devmtg/2024-04/slid… github.com/mikekben/SLOT
12
1
40
4,093
In recent ntoskrnl.exe update from KB5041587 @Microsoft introduced "Feature_Servicing_AmdDisableEarlyIBPB__private_IsEnabledDeviceUsage" and enables IBPB later on in the KiUpdateSpeculationControl function. Wondering why this gives a huge performance boost on >=Zen3 CPUs ?!
Image from BlipsAndChitz🚀 (@Blips_and_Chitz)
Image from BlipsAndChitz🚀 (@Blips_and_Chitz)
2
1
13
2,205
It seems that Intel CPU specific settings were also applied in AMD CPUs and this piece of code is now wrapped with an "if" statement.
1
1
457
Thats the piece of code that was also applied for AMD and is skipped now.
Image from BlipsAndChitz🚀 (@Blips_and_Chitz)
295
BlipsAndChitz🚀 retweeted
Peter Goodman (@peter_a_goodman) profile picture
Peter Goodman
@peter_a_goodman3 Aug 2024
Replying to @h0mbre_
I open-sourced my C/C++ build indexer. It has a really cool and extensive API: github.com/trailofbits/multi…
GitHub - trailofbits/multiplier: Code auditing productivity multiplier.

GitHub - trailofbits/multiplier: Code auditing productivity multiplier.

Code auditing productivity multiplier. Contribute to trailofbits/multiplier development by creating an account on GitHub.

github.com
3
30
1
105
13,409
Just spotted two otters covered in oil after the vessel accident here in Singapore this morning. It looks really bad 😢 #singapore #oil
2
4
1
7
2,729
BlipsAndChitz🚀 retweeted
Matt (@matt_dz) profile picture
Matt@matt_dz5 Mar 2024
Hydra: Generalizing Peephole Optimizations with Program Synthesis users.cs.utah.edu/~regehr/ge… Manasij Mukherjee (@manasij7479) and John Regehr (mastodon.social/@regehr/1120…) OOPSLA 2024 (@splashcon)
Image from Matt (@matt_dz)
Image from Matt (@matt_dz)
Image from Matt (@matt_dz)
Image from Matt (@matt_dz)
1
19
1
89
9,178
Simplifying Mixed Boolean-Arithmetic Obfuscation by Program Synthesis and Term Rewriting dl.acm.org/doi/abs/10.1145/3…
Simplifying Mixed Boolean-Arithmetic Obfuscation by Program Synthesis and Term Rewriting | Procee...

Simplifying Mixed Boolean-Arithmetic Obfuscation by Program Synthesis and Term Rewriting | Procee...

dl.acm.org
1
1
13
1,939
github.com/astean1001/ProMBA
GitHub - astean1001/ProMBA: MBA deobfuscator via Program Synthesis and Term Rewriting

GitHub - astean1001/ProMBA: MBA deobfuscator via Program Synthesis and Term Rewriting

MBA deobfuscator via Program Synthesis and Term Rewriting - astean1001/ProMBA

github.com
1
1
12
1,618
Optimizing Homomorphic Evaluation Circuits by Program Synthesis and Time-Bounded Exhaustive Search psl.hanyang.ac.kr/assets/pdf…
3
600
Load more