Research / High Tech

An Introduction to Linear Mixed Boolean-Arithmetic Obfuscation

Reverse engineers run into this constantly: a function that should be one instruction sprawls into twenty, every one of them harmless on its own. Nothing about it looks like arithmetic, and that is deliberate. This post takes MBA obfuscation apart down to the single rule it is built o …

Read Story

Understanding Fuzzer Architecture Through a Working Toy Example

What does it take to build a working fuzzer? Through a simple Python tool, a vulnerable C parser, and three planted bugs, this toy example explains the architecture, feedback loops, and limits behind modern bug-finding.

Read Story

Dynamic Binary Instrumentation with Intel Pin

A Powerful Tool for Reverse Engineers and Security Researchers Some programs only make sense once they’re in motion. Reverse engineering gets easier when you can follow every step, not just guess the next one, and turn runtime behaviour into evidence you can trust. Precision cuts toug …

Read Story

How to Solve CTF Crackmes Like Pros

Crackmes aren’t just puzzles; they’re battlegrounds for reverse engineering mastery. From tearing apart broken crypto to decoding custom virtual machines, elite CTF players rely on a blend of math, timing tricks, and deep code intuition.

Read Story

AIs Can Now Clone Themselves

Remember Agent Smith in The Matrix, copying himself across the digital world until every program in the system became another Smith? What seemed like science fiction - an artificial intelligence that could create perfect copies of itself - is no longer just a movie plot.

Read Story

A Quick Introduction to Symbolic Execution

A Quick Introduction to Symbolic Execution

By analysing the behaviour of programs under various hypothetical inputs represented as symbolic values, this technique allows security professionals to systematically uncover and address potential security flaws that might not be evident during conventional testing.

Read Story

Path Traversal and The Good Old Days

Why do old cybersecurity vulnerabilities like path traversal still pose risks to contemporary digital infrastructures? After multiple decades, their enduring presence shows us there is still much we can learn from the past.

Read Story

The CVE-2024-3094 Saga

Open-source software powers the backbone of the internet, driving everything from tiny IoT devices to massive data centres. However, CVE-2024-3094 serves as yet another cautionary tale of trust and treachery. First Published 29th April 2024 Trust me. 5 min read | Reflare Research Team …

Read Story

Reverse Engineering is Not Hard with LLM Powered Tools

Reverse Engineering is Not Hard with LLM Powered Tools

With the advent of LLM-powered tools, the intricate task of reverse engineering compiled software is becoming more manageable, allowing newcomers and seasoned professionals to navigate the process more easily. First Published 9th April 2024 The reversing engineer. 4 min read | Reflare …

Read Story

Is Your CPU Leaking Sensitive Data?

Is Your CPU Leaking Sensitive Data?

In a recent turn of events, Intel and AMD are once again under the cybersecurity spotlight, with critical vulnerabilities found in their CPUs, challenging the notion of hardware-level security in modern computing.

Read Story

Subscribe by email