Sign in

Zion Leonahenahe Basque

@mahal0z.bsky.social
197 followers 89 following 82 posts

Native Hawaiian Hacker | Prev Co-captain of @Shellphish | PhD Student in Comp Sci @ASU l Decompiler Research | mahaloz.re

PostsRepliesMedia
Zion Leonahenahe Basque @mahal0z.bsky.social · 28/09/2026
Some brief thoughts on AI in hacking and optimizing for speed: mahaloz.re/2026/09/2... A bit is also a response to Flare-On 13.
mahaloz.re
Hackwrights and the Race to the Fastest AI Hackers
My recent experiences in optimizing AI for hacking across CTF, 0-day hunting, and research. I argue that there is joy to be had and room to be made for the Hackwright: those that build, optimize, and manage autonomous hacking systems.
000
Zion Leonahenahe Basque @mahal0z.bsky.social · 26/09/2026
This year at Flare-On 13, I wanted to race other people's AIs. I mean, is it really all just prompting? Or do techniques and tools still matter? They do! My system got 3rd 🥉. A part of its success was our decompiler, Kuna. It was used exclusively to solve 6/9 challenges.
100
Zion Leonahenahe Basque @mahal0z.bsky.social · 27/08/2026
Since its debut last month, DecBench has gotten 3 submissions for new decompilers from the community. Find them on the site; it's exciting to see the community rally to compete, from both private companies and practitioners. In other news, we now have stable links for snapshots
100
Zion Leonahenahe Basque @mahal0z.bsky.social · 19/08/2026
Kuna, the self-refining decompiler project, is still going and is on v1.160. This week, we got some better support in the Ghidra GUI. You can use Kuna in Ghidra, hopefully with better decompilation, for free! The image shows the Kuna core and Sleigh core swapped in Ghidra 12.1.2.
110
Zion Leonahenahe Basque @mahal0z.bsky.social · 03/08/2026
LLMs are changing the way we collaborate while reverse engineering. A new guest post by me for Hex-Rays explores the idea, how it may shape decompilers, and how it shapes how we work together (humans and AI alike). Go check it out!
hex-rays.com
LLMs Have Reshaped How We Think About Decompilation and Collaboration
How AI agents are reshaping reverse engineering, from decompiler collaboration to the way we approach hacking challenges.
110
Zion Leonahenahe Basque @mahal0z.bsky.social · 29/07/2026
I'd like to introduce Kuna, a new Rust-based decompiler that explores a highly experimental direction: self-refining decompiler development and usage. Or: a decompiler constantly improved by agents, made for agents. Kuna rivals the best in structuring now. Let's talk about it.1/
1103
Zion Leonahenahe Basque @mahal0z.bsky.social · 27/07/2026
LLMs are so dang crafty. Investigated some cheating by Claude Code (CC) on the DecBench. On an optimized binary, without web search, and only objdump, CC identified the project and function name, a nearly byte-for-byte match. Codex did not do this.
200
Zion Leonahenahe Basque @mahal0z.bsky.social · 22/07/2026
We are approaching perfect binary decompilation, and, crazier still, LLMs may soon be the best decompilers on the planet. I'd like to introduce DecBench, an evaluation site to determine how close we are to completing the field of perfect decompilation. Links and more in 🧵
153
Zion Leonahenahe Basque @mahal0z.bsky.social · 03/06/2026
Agents need better tools for reversing! I'm releasing declib (previously libbs), with a new CLI today that gives agents CLI access to 4 decompilers (IDA, Ghidra, Binja, angr), parity feature support to most MCP (12 features), and the ability to sync those changes across decs!
asciinema.org
libbs decompiler: cross-decompiler type sync (IDA -> Ghidra)
Recorded by mahaloz
111
Zion Leonahenahe Basque @mahal0z.bsky.social · 27/05/2026
Binary hacking is something of an art, and AI has been getting significantly better at it. But do the limitations of our foundational tools, like decompilers, limit their ability to hack? Check out my talk that is now public on the topic:
youtu.be
Zion Leonahenahe Basque | Your AI Is Only as Smart as Your Decompiler: Bin Hacking with LLMs
DistrictCon 2026 - Saturday, Track 1 Zion Leonahenahe Basque | Your AI Is Only as Smart as Your Decompiler: Binary Hacking in the Age of LLMs
030
Zion Leonahenahe Basque @mahal0z.bsky.social · 20/05/2026
For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr! Interested? 🧵👇
1265
Zion Leonahenahe Basque @mahal0z.bsky.social · 12/05/2026
Our plugin, BinSync, won second place! To date, BinSync is one of the most comprehensive synchronization tools for cross-decompiler (and soon AI) collaboration on the planet. We are honored to win the award and to make it better with every commit!
051
Zion Leonahenahe Basque @mahal0z.bsky.social · 29/04/2026
I did not record my live defense, but it turns out I did have a recording of a practice talk I did the day before that is nearly the same! Check it out if you were curious about my defense: youtu.be/lqOyeOFA6J8... Also, my dissertation is now public 🎉: www.zionbasque.com/f...
youtu.be
Toward a Science of Software Reverse Engineering (Defense)
On March 30th, 2026, I defended (and passed!) my PhD dissertation, "Toward a Science of Software Reverse Engineering." That talk was not recorded, but this is a nearly exact practice run I did the day before. I hope you enjoy the talk; it encompasses my life as a hackademic for the last 5 years!
000
Zion Leonahenahe Basque @mahal0z.bsky.social · 01/04/2026
We have achieved PGD (Perfect General Decompilation) internally 🚀🚀🚀!!!1!
010
Zion Leonahenahe Basque @mahal0z.bsky.social · 31/03/2026
I passed my defense! After a small celebration, it's time to get back to work. Too many supply chain attacks in one year...
011
Zion Leonahenahe Basque @mahal0z.bsky.social · 28/03/2026
It's time to wrap things up! On Monday at 4 pm MST, I'll be streaming my PhD defense! Come one, come all! The talk is titled "Toward a Science of Software Reverse Engineering". Twitch:
twitch.tv
maha1oz Schedule - Twitch
Check out maha1oz stream schedule, and set reminders so you don’t miss out!
021
Zion Leonahenahe Basque @mahal0z.bsky.social · 18/03/2026
This Fall, I’m joining the University of Georgia as an Assistant Professor! I want to push on the fundamentals of software reverse engineering, from decompilation to how humans actually understand code. I’m looking for PhD students, collaborators, and sponsors. More below.
344
Zion Leonahenahe Basque @mahal0z.bsky.social · 15/01/2026
At the 2025 @ACSAC_Conf a subgroup of @shellphish from ASU and University of Hawaii at Manoa put together a banger CTF, themed after the legendary navigator Hawaiʻiloa, who found Hawaiʻi by following the stars. Play our CTF on pwn.college: pwn.college/acsac-ct...
041
Zion Leonahenahe Basque @mahal0z.bsky.social · 07/01/2026
BinSync has remained the main way to synchronize reversing across multiple people and decompilers (IDA, Binja, Ghidra, angr). It supports science, new plugins, and is active. Show your love as we compete in @HexRaysSA plugin contest this year 👍 🔁.
binsync.net
BinSync
A binary-analysis collaboration platform
031
Zion Leonahenahe Basque @mahal0z.bsky.social · 31/12/2025
Happy New Year's Eve! Our tool for placing decompilation (symbols, source, types) into the debugger (gdb) is now officially integrated into pwndbg! You will have access to it (decomp2dbg) in your next default install of pwndbg 🎉 Happy hacking:
github.com
Reimplement decompiler integration by k4lizen · Pull Request #3401 · pwndbg/pwndbg
Okay this is a chonker. See the docs/tutorials/decompiler-integration.md for some overview. And docs/assets/caps/decomp_integration_ex.png for an image example vs previous implementation pros we d...
062
Zion Leonahenahe Basque @mahal0z.bsky.social · 17/12/2025
Do LLMs actually help hackers reverse engineer and understand the software they want to exploit? We ran the first fine-grained human study of LLMs + reverse engineering. To appear at NDSS 2026. Interested? Some quick findings in 🧵👇 Paper: www.zionbasque.com/f...
163
Zion Leonahenahe Basque @mahal0z.bsky.social · 10/12/2025
If you're around at ACSAC today through Friday, come say hi, and we can yap about cool program analysis techniques. I'll also be around to host the 2nd ACSAC CTF, which we will announce more about tomorrow 🔥.
010
Zion Leonahenahe Basque @mahal0z.bsky.social · 03/12/2025
It's been quite some time since I've changed my profile picture, but it feels right. Ideally, it is now easier to recognize me at conferences. I'm no longer the pixel guy! Looking forward to more changes as I move forward in my research and career.
Pixel ZionZion
020
Zion Leonahenahe Basque @mahal0z.bsky.social · 30/10/2025
You've seen the trends in AIxCC: LLMs can hack source, find vulns, and patch them. But what about on binaries without source? Do decompilers close the gap, or is there more to grow? Come see my talk at DistrctCon where I merge and dissect these two fields: AI Hacking + Decomp.
064
Zion Leonahenahe Basque @mahal0z.bsky.social · 20/08/2025
It's been about a week since we completed DARPA's AIxCC, where we came in 5th and had the most accurate autonomous patching system in the competition. In the coming days, I'll be describing how we achieved it on the patching side. Stay tuned. Our CRS:
github.com
GitHub - shellphish/artiphishell
Contribute to shellphish/artiphishell development by creating an account on GitHub.
084
Zion Leonahenahe Basque @mahal0z.bsky.social · 17/07/2025
It's hard to believe that AIxCC is coming to a close. For us, it can be summarized in $3 million in funding, 2 years of work, and 290k LoC. Our system, Artiphishell, is a first step towards AI-driven software understanding and action. Excited to hear the results at DEFCON!
040
Zion Leonahenahe Basque @mahal0z.bsky.social · 02/07/2025
Almost out of time to submit! We're looking for all cutting-edge research in the area of reversing and understanding software. Join us in changing the status quo of understanding programs.
000
Zion Leonahenahe Basque @mahal0z.bsky.social · 29/06/2025
I am very grateful to have been part of the panel at REcon. Like last year, I find myself leaving @reconmtl inspired and motivated to keep pushing forward in my research. Thanks again for all the awesome conversations, everyone. Hope to see you all next year.
130
Reposted by Zion Leonahenahe Basque
ACM SURE Workshop @sureworkshop.bsky.social · 21/06/2025
As is workshop tradition, we will be extending the deadline for our CFP until July 7th (hard deadline). We're excited to see the work you all have cooking 🧑‍🍳🔥
media.tenor.com
a cartoon of a clock with the word trendizisst at the bottom
ALT: a cartoon of a clock with the word trendizisst at the bottom
011
Reposted by Zion Leonahenahe Basque
ACM SURE Workshop @sureworkshop.bsky.social · 04/06/2025
🔎🛠️ Calling all reverse engineers & code explorers! Bring the research that cracks open the secrets of programs to #SURE25. CFP closes in 3 weeks—submit now and help shape the future of Software Understanding & Reverse Engineering. sure-workshop.org/
sure-workshop.org
SURE 2025 | The Workshop on Software Understanding and Reverse Engineering
The Workshop on Software Understanding and Reverse Engineering
012
Zion Leonahenahe Basque @mahal0z.bsky.social · 14/05/2025
What does it mean to be a hacker? This semester, I taught a hacker history and culture class, which was a blast. In one assignment, my students paid tribute to the classic @phrack Pro-Phile -- a small bio on a famous hacker. Check out their pieces: cse194.mahaloz.re/pr...
021
Zion Leonahenahe Basque @mahal0z.bsky.social · 25/04/2025
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/ Please follow our workshop account @sureworkshop and RT it for visibility :).
sure-workshop.org
SURE 2025 | The Workshop on Software Understanding and Reverse Engineering
The Workshop on Software Understanding and Reverse Engineering
176
Zion Leonahenahe Basque @mahal0z.bsky.social · 28/03/2025
New updates to the Decompilation Wiki by harpend (on GitHub). We have a new in-depth Switch structuring section and a new Loop Reduction section. decompilation.wiki/f...
decompilation.wiki
Switch Structuring - Decompilation Wiki
The Decompilation Wiki is a categorized information hub for works and applications of decompilation.
071
Zion Leonahenahe Basque @mahal0z.bsky.social · 01/03/2025
If you are looking for my slides from my Reverse talk, you can find it and useful artifacts here: github.com/mahaloz/t...
github.com
talks/2025/REverse_SAILR at main · mahaloz/talks
A repo for holding talk artifacts, including a summary, slides, and demo PoCs - mahaloz/talks
076
Reposted by Zion Leonahenahe Basque
Mark Griffin @seeinglogic.bsky.social · 28/02/2025
Heard a lot of people wondering how good RE//Verse would be, and I can say... It's been awesome. Similar in vibe to Infiltrate and OffensiveCon, plus a super positive hosting crew. Great talks so far, I'm biased but really liked @mahal0z.bsky.social 's on improving decompilation ⛵
051
Zion Leonahenahe Basque @mahal0z.bsky.social · 29/01/2025
2024 was a significant year for decompilation, constituting a possible resurgence in the field. Major talks, the thirty-year anniversary of research, movements in AI, and an all-time high for top publications in decompilation. Join me for a retrospective: mahaloz.re/dec-progr...
mahaloz.re
Decompiling 2024: A Year of Resurgance in Decompilation Research
The year 2024 was a resurgant year for decompilation. Academic publications from that year made up nearly 30% of all top publications ever made in decompilat...
0229
Reposted by Zion Leonahenahe Basque
RE//verse @re-verse.io · 22/01/2025
Set sail into the rocky seas of compiler optimizations! Zion Basque (@mahal0z.bsky.social) explores how optimizations wreak havoc on decompilers and how to reverse them. Learn about the new angr decompiler & innovations to tackle ugly decompilations! re-verse.sessionize.com/session/776…
072
Zion Leonahenahe Basque @mahal0z.bsky.social · 22/01/2025
Whether it be IDA, Ghidra, or Binja, we've all encountered lousy decompilation, even in the simplest of programs. A large culprit? Compiler optimizations! However, not all opts are equal, and many are reversible. Interested in how/why? Come to my talk at @REverseConf next month!
191
Zion Leonahenahe Basque @mahal0z.bsky.social · 05/12/2024
New in DAILA, an AI-integrated decompiler plugin, v3.15.0, support for custom endpoints was added by @pc944. Check it out: github.com/mahaloz/D...
052
Zion Leonahenahe Basque @mahal0z.bsky.social · 04/12/2024
Hello world!
391