I hate writing pattern-matching code for function identification in my .NET #deobfuscator and config extractor. So I built a tool to help me out with it. Meet CILFI: A function identification tool for .NET binaries: 👉https://blog.washi.dev/posts/cilfi/ #dotnet #reversing #malware #ioc

Custom attributes in #dotnet give me nightmares. Read my new blog post to learn why: 👉 blog.washi.dev/posts/custom... #reversing #malware #pe #binary #asmresolver

#AsmResolver 6.0.0 is finally here! - Support for more PE architectures - Supercharged .NET multi-assembly processing - Compatible with NixOS and legacy .NET FX 3.5 - Many API improvements - Massive performance boosts 👉 github.com/Washi1337/As... #pe #dotnet #reversing #malware

Release 6.0.0 · Washi1337/AsmResolver

After 2 years of development, v6.0.0 is officially here! This version focuses on five key milestones: Expanded Architecture Support: A new Platform abstraction enables support for more architectu...

github.com

Over the past couple years, I have come to know the #dotnet platform pretty well, from a developer's and a #reversing standpoint. I can’t always say the same the #infosec community. Today, I decided to rant a little (or maybe a lot 🙃) 👉 blog.washi.dev/posts/miscon...

Better late than never, I finally managed to finalize my #flareon12 write-ups😄 Overall, it was a fun set of challenges and the latter ones a reminder of how much I still have to learn in the field of RE :). 👉 blog.washi.dev/posts/flareo... 👉 washi1337.github.io/ctf-writeups...

#AsmResolver 6.0.0-beta.4 released! This release addresses many shortcomings found during beta.3, including ARM32 and ARM64 support, auto references importing, and many other DX improvements. 👉 Get it on GitHub or NuGet: github.com/Washi1337/As... #dotnet #pe #reversing

Release 6.0.0-beta.4 · Washi1337/AsmResolver

It's been a while since the last beta.3 release, and the main reason for this has been that beta.3 saw many more testers actively trying out v6.0.0 and pushing it to its limits. Beta.4 addresses ma...

github.com

After #flareon11 challenge 7, I got inspired to build tooling for #dotnet Native AOT reverse engineering. As such, I built a #Ghidra Analyzer that can automatically recover most .NET types, methods and frozen objects (e.g., strings). 👉https://blog.washi.dev/posts/recovering-nativeaot-metadata/

#AsmResolver 6.0.0-beta.3 just got pushed to NuGet! More bugs were found and squashed. We are closing in on a full release with most of the public API being stable. Get it on GitHub or NuGet👉 github.com/Washi1337/As... #dotnet #pe #reversing

Release 6.0.0-beta.3 · Washi1337/AsmResolver

This is a maintenance release. AsmResolver is closing in on a main release with most of the public API being stable. However, similar to 6.0.0-beta.2, this is still a pre-release and some of the pu...

github.com

#AsmResolver 6.0.0-beta.2 has been released This is a maintenance release that addresses many regressions introduced by the refactors in 6.0.0-beta.1. Get it on NuGet or GitHub 👉 github.com/Washi1337/As...

Release 6.0.0-beta.2 · Washi1337/AsmResolver

This is a maintenance release that fixes some shortcomings and addresses various regressions introduced by the refactors in 6.0.0-beta.1. Similar to 6.0.0-beta.1, this is an unstable release and th...

github.com

I just published my writeups for all challenges of #flareon11: 👉 blog.washi.dev/posts/flareo... 👉 washi1337.github.io/ctf-writeups... Hope you like them as much as I liked writing them!