@Rolf_Govers

Full-time Nerd 🥸 | Mobile Security Enthusiast 📱🕵🏻‍♂️👾
Joined February 2010
  • Tweets6.6K
  • Following407
  • Followers478
67Media
The IDA 9.5 Beta is live! ◾ IDA MCP + Assist for agentic RE ◾ New TriCore, Hexagon and DEX/ODEX decompilers ◾ Recursive decompilation ◾ New Malware Analysis add-on ◾ And more... Beta members: it's in your Download Center now. Not in the Beta program? Join from the customer portal today. hex-rays.com/blog/ida-9.5-be…
9
53
7
456
35,287
Rolf retweeted
Calif
@calif_io
Sep 30
CVE-2026-86950: The Great Glyph Grift calif.io/research/the-great-…
4
77
6
242
43,899
Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: blackstormsecurity.com/resea… This article will be published on exploitreversing.com/ next week. I would like to thank Ilfak Guilfanov (@ilfak) and Hex-Rays SA (@HexRaysSA) for the continuous support. Hope you enjoy the read! #iOS #Apple #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering
4
93
378
17,435
IonStack part III: Rooting Android 17 with GhostLock Article about adapting the exploit of CVE-2026-43499 (kernel stack UAF) to Android. The researchers used KernelSnitch, ashmem fops overwriting, pipe_buffer corruption, and other tricks to perform LPE. nebusec.ai/research/ionstack…
25
116
5,125
Rolf retweeted
_bhamza@_bhamza
Jul 31
A mobile security assessment costs a few thousand euros and takes weeks — so most Android teams just skip it on most releases. After ~10 years running these assessments, I compressed that know-how into a product. It's live today: Atomic App Scanner 🧵
1
4
9
527
TOMORROW, THE WIZARD WAR BEGINS! 🧙‍♂️ Join your armies in F2P W316 at 7PM BST / 2PM ET / 11AM PT at Varrock east and west banks for a free-for-all at the Varrock ditch. MAY THE BEST WIZARD WIN 🏆
30
36
9
756
79,589
If I had free time, I'd be giving LinkedIn's new "Seems like AI slop" button a workout.
1
1
13
1,274
As promised, DarkSword Kernel Exploit writeup is now live at therealclarity.github.io/blo… This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented. Hope it helps anyone looking to understand it! :)

Into the Dark - DarkSword Kernel Exploit Writeup | imnotclarity

A clear look into DarkSword, the latest public Kernel Exploit up to iOS 26.0.1, its root cause, and its reimplementation as ClearSword.

therealclarity.github.io
9
121
2
511
49,793
Oh wow, remember the usbliter8 BootROM exploit that Paradigm Shift published about? Magnet Forensics (the GrayKey guys) allege that (1) Magnet products were exploiting it ITW(!) and (2) a former employee who went to work for Paradigm Shift leaked the details to them! 🤯
4
38
5
246
60,995
We refreshed ida_kernelcache: bug fixes + a full IDA 9.x port. Tested and working on IDA 9.3 against the latest iOS. github.com/cellebrite-labs/i… @CellebriteLabs

GitHub - cellebrite-labs/ida_kernelcache: An IDA Toolkit for analyzing iOS kernelcaches.

An IDA Toolkit for analyzing iOS kernelcaches. Contribute to cellebrite-labs/ida_kernelcache development by creating an account on GitHub.

github.com
1
24
117
9,235
Rolf retweeted
Frida@fridadotre
Jun 25
🚀 Luma is here. A new workspace for Frida. Persistent sessions. Interactive REPL. frida-trace. Collaboration. Available now for macOS, iOS, Linux, and Windows.
6
37
2
220
24,126
MemNixFS - A new memory forensics tool for Linux memory! Memory forensics in an easy to use virtual file system similar to MemProcFS - but for Linux! github.com/MemNixFS/MemNixFS

GitHub - MemNixFS/MemNixFS: Linux Memory Forensics Framework That Transforms Memory Dumps Into a...

Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem - MemNixFS/MemNixFS

github.com
8
35
1
124
8,090
[1/5] 🚨 Malfixer has a new release on GitHub. This update was driven by a recent Antidot banking trojan sample: two previously unseen APK malformation techniques, actively used to hinder analysis pipelines. github.com/Cleafy/Malfixer

GitHub - Cleafy/Malfixer: MalFixer is a comprehensive toolkit for inspecting and recovering...

MalFixer is a comprehensive toolkit for inspecting and recovering malformed Android APK files - Cleafy/Malfixer

github.com
1
3
4
333
Excited to be attending @reconmtl in Montreal 🇨🇦 this week— the world’s largest known reverse engineering conference! Looking forward to the training and a fantastic lineup of talks and events. If you’re attending as well, let’s meetup and connect! #reCON
3
108
Rolf retweeted
REcon
@reconmtl
Jun 13
Recon badge has arrived!!! Thanks to electronic cats electroniccats.com/
1
10
48
2,729
Epic OPSEC fail by NSO Group. @whatsapp recently caught the notorious spyware company hacking across their platform. (NSO is forbidden from doing this by a US court!) In their testing, NSO was sending a test image of a soup cup...on a desktop mat with the NSO Group logo. Making it worse, the image was user-reported to WhatsApp. Cleanest attribution I've seen in a long time.
27
151
15
1,359
137,557
I have added another 250,000 malwares to the malware collection. Please download the malware here: vx-underground.org Thank you.
40
69
2
1,541
45,074
🎂 IDA Turns 35. From DOS-era disassembler to one of the most widely used reverse engineering platforms in the world... To celebrate, we’re launching: • 35% off new licenses (see eligibility requirements) • Limited-edition swag giveaway • “35 Ways to Use IDA” as told by you • Stories from the past and a few for the future Read all about it here: hex-rays.com/blog/ida-turns-…
7
34
2
219
25,042
We're finally ready to talk about Flipper One — a project we've been grinding on for years and have rebuilt from scratch several times. Read blog post >> blog.flipper.net/flipper-one…

Flipper One — we need your help

With Flipper One, we're reimagining what a Linux cyberdeck can be — it's a huge project. We're opening up the development process and asking the community for help.

blog.flipper.net
112
540
106
3,979
577,648
.@__sethJenkins updated our 0-click exploit chain to work on a Pixel 10 with an eye-popping driver bug! We’ll be presenting this work Saturday @offensive_con projectzero.google/2026/05/p…

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible t...

projectzero.google
21
1
106
10,596
Load more