Slides and materials for the talk Reconstructing Rust Types: A Practical Guide for Reverse Engineers at RE//verse 2025, presented on February 28, 2025.

Personal research into the Xbox Series Architecture

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Advanced Open Source C++ Game Engine with multi-threaded Vulkan rendering

A collection of academic papers / Git repos / conference talks / frameworks / tools related to cellular security and privacy.

Which SoC type does my console have?

A simple utility for bypassing amfid signature verification

The leaked exploit toolkit for various iOS versions

Recovered samples, extracted Wasm/binaries, decoded payloads & analysis scripts from the Coruna iOS/macOS exploit kit (b27.icu). 28 JS modules, 6 Wasm, 13 ARM64 binaries.

Agent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome extension, etc.

A reverse-engineering agent for IDA Pro and Binary Ninja

deobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude

A tool to unpack installers created by Inno Setup

A Safe #[no_std] ASN.1 Codec Framework

Training neural networks on Apple Neural Engine via reverse-engineered private APIs

QEMU to drcov trace file

Code of KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations (USENIX Security'23)

Pure Python implementation of UE5 network protocol

1 script run the vphone

Qwen3-Coder is the code version of Qwen3, the large language model series developed by Qwen team.

LLM inference in C/C++

🪁 AOT binary translation toolchain

Make system partition become read-write (it is also possible without Magisk)

BootROM dumps from misc SoCs

Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the Airoha MT2811 SoC.