Developer - Reverse Engineer - CTF player - Scrub. 🔧 I develop #AsmResolver, ✍️ blog at https://nitter.cf/t.co/2WDyyrf4Rc, and sometimes 👾 hack with @Shellphish
McMurdo Station, Antarctica
Joined October 2019
- Tweets281
- Following110
- Followers2K
- Likes528
Pinned Tweet
Did you know you could write entire #csharp programs just by using the "await" keyword?
OK, well not really, but I spent some weekends developing AwaitFuscator: A (dumb) #obfuscator that turns your #dotnet program into nothing but "await" expressions!
👉blog.washi.dev/posts/awaitfu…
"These prizes were available to the first finishers while supplies lasted."
Is that why there was no contact form for me this year?
I get it but I won't lie it feels a bit like getting punished for being a human-only player 🫠
security.googlecloudcommunit…
#flareon13 @nickharbour
With less than 1h left on the clock, #flareon13 finally in the bag!
Taylor series were not on my bingo card 😅
I can finally rest...
Washi retweeted
LLMs are great at finding bugs, but they aren't very good at fixing them, or writing good code in general. LLM will implement a "simple fix" without questioning the current architecture, they always have "will do my captain" attitude.
I'm afraid that those who mindlessly use LLMs to fix current wave of security issues will just introduce new ones, more subtle but not less dangerous.
Remember that coworker with an attitude of "this code is shit, we need to rewrite all of it" that everybody on your team hated? You must be this coworker for an LLM now if you use them heavily. Instead of relying on their "simple fixes", try to rearchitect your stuff in a way that makes entire family of bugs impossible.
With less than 1h left on the clock, #flareon13 finally in the bag!
Taylor series were not on my bingo card 😅
I can finally rest...
Washi retweeted
I’m seeing a lot of Slibes (slop-vibe-slides) lately. AI can throw together a pretty-looking slide deck faster than you can blink. However, just like slop-text, slop-slides show a lack of respect for your audience. If it’s worth my time to read, it’s worth your time to edit.
So who is down to set up a human-only leaderboard for this year🙃
#flareon13
I gave Opus one prompt and all nine Flare-On 12 challenges. It solved them all in 4h 28m. No IDA, no decompiler, no debugger, and it never ran a single binary. Python with capstone, unicorn and z3.
More info 👇
#FlareOn #ReverseEngineering #CTF
Never would I have expected this for a spare time hobby project. 1 million downloads is crazy, thank you all ❤️
#asmresolver #malware #dotnet #reversing
The timer for #flareon13 started on flare-on.com
I will likely participate, but not sure I will try to speed-solve it like previous years.
Last year was already somewhat pay-to-win. I expect this year to be worse. I don't see any fun in competing against unlimited AI
I hate writing pattern-matching code for function identification in my .NET #deobfuscator and config extractor. So I built a tool to help me out with it.
Meet CILFI: A function identification tool for .NET binaries:
👉blog.washi.dev/posts/cilfi/
#dotnet #reversing #malware #ioc
This is actually a very well-explained beginner series on #dotnet #reversing. We need more good beginner-friendly sources like these.
🧩 Video 2 in the .NET obfuscation series is now public!
youtu.be/6rcUxmRGhlg
In this video we'll explore the Global Module Constructor (.cctor) to analyze the impact of anti-debugging and anti-tamper protections.
![[Workshop] Anti-Analysis Logic – Inspecting the .cctor & Anti-Debug](https://pbs.twimg.com/card_img/2114840238178639874/LvVnynYg?format=jpg&name=800x320_1)
Custom attributes in #dotnet give me nightmares.
Read my new blog post to learn why:
👉blog.washi.dev/posts/custom-…
#reversing #malware #pe #binary #asmresolver
#AsmResolver 6.0.0 is finally here!
- Support for more PE architectures
- Supercharged .NET multi-assembly processing
- Compatible with NixOS and legacy .NET FX 3.5
- Many API improvements
- Massive performance boosts
👉github.com/Washi1337/AsmReso…
#pe #dotnet #reversing #malware
Washi retweeted
The first release candidate of dnSpyEx 6.6.0 is now available for download.
github.com/dnSpyEx/dnSpy/rel…
Washi retweeted
https://nitter.cf/t.co/6Ac8JDjE3O
TODAY IS LAUNCH DAY!
The recompilation project
Twilight Princess Dusk is available for download on ALL PLATFORMS.
Windows, Linux, Android, iOS and more!
Modding, High res textures support, unlocked framerates, new control schemes etc! Enjoy!
You can call me a "nerd" that's fine. Making a mistake is also fine!
Unnecessary sensationalism is not fine. You have a big following. I'm asking you to be responsible with it.
This quoted post is unavailable.
ILSpy does not and never has owned a WordPress. See github.com/icsharpcode/ILSpy…
Maybe consider verifying your "news" before spreading false information and fear mongering.
This quoted post is unavailable.
Washi retweeted
UPDATE: our work won a best paper award 🏆 @NDSSSymposium! Check out our work on establishing the first measurements for understanding how LLMs are changing reverse engineering.
Shout out to the whole team from @SCAI_ASU, @EURECOM, and @UniPadova
Do LLMs actually help hackers reverse engineer and understand the software they want to exploit?
We ran the first fine-grained human study of LLMs + reverse engineering.
To appear at NDSS 2026.
Interested? Some quick findings in 🧵👇
Paper: zionbasque.com/files/papers/…
Over the past couple years, I have come to know the #dotnet platform pretty well, from a developer's and a #reversing standpoint.
I can’t always say the same the #infosec community.
Today, I decided to rant a little (or maybe a lot 🙃)
👉 blog.washi.dev/posts/misconc…
Washi retweeted
Pwndbg 2026.02.18 is out!
We visualize branches in nearpc, sync ur decompiler (IDA/Binja/Ghidra) via decomp2dbg, annotate stack vars from dbgsyms/decomp, added new cmds for tracing kernel allocs/frees, dump task info: github.com/pwndbg/pwndbg/rel…
Sponsor us: github.com/sponsors/pwndbg/
