iiinova — where your digital self keeps evolving

cryptax.bsky.social @cryptax.bsky.social · 01/06/2026

Last Friday, I was at Auvergn'hack, a small single-tracked conference in the middle of France. A very friendly atmosphere, beautiful weather, great venue, and several very interesting talks. cryptax.github.io/posts/auverg... #landlock #opencode #auvergne #quantum #crypto #conference #CTF

010

cryptax.bsky.social @cryptax.bsky.social · 26/05/2026

Ce vendredi, atelier "reverse avec IA" à Auvergn'hack : www.auvergnhack.fr - Configurer OpenCode - Installer Ghidra + son serveur MCP - Créer un agent et des skills pour le reverse - Résoudre divers challenges CTF et CrackMe avec IA - Visual Studio Code + Cline - Rétro-ingénierie de Saint Nectaire

232

cryptax.bsky.social @cryptax.bsky.social · 04/05/2026

We're speaking at THCon, with Damien, on Wednesday this week. AI has really changed CTFd. Can we do something about it? Yes. We'll present a couple of ideas we experimented with - and hope it gives you tons of other ideas. #CTF #AI

122

cryptax.bsky.social @cryptax.bsky.social · 27/03/2026

Ph0wn Mag #3 eZine is out! With writeups of FrangiPh0wn (teaser of Ph0wn) and Ph0wn CTF 2026 github.com/ph0wn/writeu...

001

cryptax.bsky.social @cryptax.bsky.social · 24/02/2026

This piece of code (Arduino) is vulnerable. What's the best fix? Comment. Don't know, or want to discuss about it? Come to ph0wn in Sophia Antipolis on March 13-14: ph0wn.org (free, registration required).

000

cryptax.bsky.social @cryptax.bsky.social · 17/02/2026

For ph0wn registration, we see that many of you are struggling to put several items in your cart and consequently create x different registrations. It's simple. In pretix, you need to click on "Add tickets for a different date". Then select an other "event" : CTF, social event, workshop. #ph0wn

000

cryptax.bsky.social @cryptax.bsky.social · 07/02/2026

Are you stuck on one of the first 2 challenges of #FrangiPh0wn? As the teaser ends in 2 days, we've released a few hints, and hope they will help you reach the next level ;) ctf.ph0wn.org #RF #OSINT #AI #retrogaming #ph0wn #CTF

022

cryptax.bsky.social @cryptax.bsky.social · 26/01/2026

📅 March 13-14, 2026 - Sophia Antipolis, France 🤠 Prepare your best outfit for Ph0wn CTF's side event: the "Creative Contest". Come dressed up as a pirate, and get a chance to win a Hydrabus 😃 👉️ Details: ph0wn.org/contest/ #CTF #ph0wn2026 #pirate #flagship #hydrabus #hacker Re-posts appreciated

Image of pirates, with pirate ships in background. This advertises for Ph0wn's creative contests, where if you "exploit the outfit", you get a chance to win a Hydrabus. https://ph0wn.org

031

cryptax.bsky.social @cryptax.bsky.social · 10/01/2026

FrangiPh0wn, the Ultimate Galette for Hackers and ph0wn CTF teaser, is up until Feb 9. Head to ctf.ph0wn.org, and find the trinkets! Are you up to it? Only 15 participants flagged something up to now. Go for it! #CTF #teaser #RF #OSINT #ph0wn #frangiph0wn

031

cryptax.bsky.social @cryptax.bsky.social · 16/12/2025

Ph0wn #CTF Teaser Announced for January! We hope you get the right tools and skills for Xmas :D Get ready! We will announce #FrangiPh0wn in January. Keep an eye on ph0wn.org

010

cryptax.bsky.social @cryptax.bsky.social · 22/09/2025

On Thursday afternoon, I am thrilled to give my first r2ai & ghidraMCP workshop at BruCON. Pre-requisites: you are good to go if you already have reversed a binary (with whatever #disassembler, it doesn't matter) OR if you have basic skills and understanding in #assembly. #mcp #LLM #AI

130

cryptax.bsky.social @cryptax.bsky.social · 31/08/2025

Barb'hack is over and it was a pleasure to attend: very nice folks, friendly organizers, excellent food, best rumps lol and a CTF with a videogame interface+ challenges on Minitel. I loved it! Kudos to the staff. #barbhack25

060

cryptax.bsky.social @cryptax.bsky.social · 25/08/2025

I've very happy to speak at Barb'hack on Saturday. barbhack.fr/2025/fr/conf... There will be 2 demos. One live. One recorded - simply because I don't have the guts to do it live ;P We reverse engineer Linux/Trigona and Linux/Shellcode with radare2 + AI + HI HI standards for Human Intelligence ;P

this image was generated by Dall-E based on a prompt that describes what Linux/Trigona malware does. The malware is implemented in Delphi, thus the FPC (Free Pascal Compiler).

110

cryptax.bsky.social @cryptax.bsky.social · 19/08/2025

I've recently setup a LM Studio server, with several models including gpt-oss. I can use it from my disassembler, here to analyze a Linux/Trigona sample. Learn more about Trigona at Barb'hack on Aug 30 in Toulon. #AI #malware #reverse #assembly #context #lmstudio #GPT

121

cryptax.bsky.social @cryptax.bsky.social · 30/06/2025

Vous connaissez les vidéos de @tixlegeek.bsky.social ? Avec cet adorable Tux animé ? Ben, ça me faisait trop envie. Alors j'ai fait pareil avec Pico le Croco ! J'ai repris les explications de @tixlegeek.bsky.social dans le Twitch @laluka.bsky.social EP 193, et j'ai codé pour Pico :)

150

cryptax.bsky.social @cryptax.bsky.social · 17/06/2025

Nicolas Rouvière, of Ph0wn and SHL, will show you how to use Qiling in practice, for dynamic binary emulation. Don't miss it: on-site at SHL (Vallauris), June 19 at 7pm. In 2024, Nicolas used Qiling to solve the Ph0wn CTF teaser. See how here: github.com/ph0wn/writeu... #qiling #CTF #binary

102

cryptax.bsky.social @cryptax.bsky.social · 13/06/2025

How many times will I have to say this? Antivirus is not stupid and does NOT rely on fixed hashes or whatever to detect malware. This is an outdated myth from prehistoric times. Malware "signatures" understand binary formats + assembly and can easily dynamically detect variants.

061

cryptax.bsky.social @cryptax.bsky.social · 12/06/2025

Keynotes are a difficult exercises (for me). I'll be closing the @elbsides.bsky.social conference tomorrow with a *Quizz* keynote on how AI is used by malware authors (attack) and malware analysts (defense). I even hope to have time for a short demo :) #AI #malware #keynote #elbsides

063

cryptax.bsky.social @cryptax.bsky.social · 06/06/2025

Just captured all flags of the Badge CTF at @bsideskrs.bsky.social :) A fun badge based on RP2040 :)

010

cryptax.bsky.social @cryptax.bsky.social · 14/04/2025

Wrote a paper, with Daniel Nakov, on comparing the #quality & the speed of #malware analysis assisted by #r2ai, or without. Spoiler 1: quality is =, speed is ++. Spoiler 2: do not expect to get good results in a single question. arxiv.org/pdf/2504.07574 cc: @radareorg.bsky.social #arxiv #radare2

175

cryptax.bsky.social @cryptax.bsky.social · 01/04/2025

Side by side decompilation of the main entry point of the unpacked DEX of Android/Crocodilus. On the left, decompiled using Mistral (and r2ai). On the right, decompiled with JEB Decompiler. Both are excellent :) #radare2 #AI #mistral #JEB #crocodile #malware #Android

021

cryptax.bsky.social @cryptax.bsky.social · 31/03/2025

Demain, ph0wn labs #2 au SHL (shl.contact). Venez faire une farce sur le badge de Pico. #pico #raspberry #badge #ph0wn #SHL #CTF #reverse

021

cryptax.bsky.social @cryptax.bsky.social · 18/03/2025

Slides of my talk "Malware analysis with R2AI" @1ns0mn1h4ck.bsky.social filestore.fortinet.com/fortiguard/r... Demo of string obfuscation on Linux/RudeDevil: asciinema.org/a/708621 Download and contribute to r2ai: github.com/radareorg/r2ai @radareorg.bsky.social #AI #radare2 #malware #linux

032

cryptax.bsky.social @cryptax.bsky.social · 13/03/2025

In this example, the 2 forks of the zygote process share the same scudo secret and memory layout, which basically removes it's security enhancements. - Keynote by Mathias Payer at @1ns0mn1h4ck.bsky.social #android #scudo #zygote #inso25

021

cryptax.bsky.social @cryptax.bsky.social · 11/02/2025

Thursday Feb 13, at SHL (www.shl.contact), in Sophia Antipolis, 7pm, with your laptops. 1. Radare2 @radareorg.bsky.social **beginner** tutorial 2. Very simple CrackMes ... then more complex. Hack Pico le Croco's videophone, lift and door bell. 3. Play prior challenges of Ph0wn CTF

023

cryptax.bsky.social @cryptax.bsky.social · 04/02/2025

Checked it: no, the XOR is being done with different keys. I attach the decrypt script. Can send it as a file if you prefer.

210

cryptax.bsky.social @cryptax.bsky.social · 30/01/2025

the IP address 89.190.156[.]145 apparently comes from the encrypted tab of values set in table_init. I had difficulties getting the final values with r2 + r2ai, and finally managed to. Entry 15 decrypts to this IP address. #aquabot #mirai #r2ai

The Python program was generated by AI through r2ai. I edited slightly the output. I believe there are still a few errors. The program shows the decrypted values for the table created in table_init

This is decompiled source code generated by r2ai for table_init

210

cryptax.bsky.social @cryptax.bsky.social · 15/04/2024

I'll be presenting how #Android #malware abuse the #Accessibility API at Insomni'hack. "The Accessibility Abyss: Navigating Android Malware Waters" - Friday April 26. There will be a #demo video

000

cryptax.bsky.social @cryptax.bsky.social · 14/03/2024

Tomorrow, join me at #Nullcon Berlin to reverse a #Dart #CTF challenge (non stripped) and a Flutter release malware (stripped). We'll be using #JEB and #Radare2. We also talk a little about Ghidra, IDA Pro and Binary Ninja. nullcon.net/berlin-2024/... Be sure to have some coffee before :)

032

cryptax.bsky.social @cryptax.bsky.social · 12/01/2024

Nice: you can launch Quark Engine from JADX. This was added in 2021, but I had missed the features. Maybe I should tell JADX to integreate DroidLysis ;-) #JADX #Quark #Android #Malware

This is a screenshot of Quark Engine's analysis from JADX, on an unpacked sample of botnet Android/Hook.

000