# Reverse Engineering Reverse engineering is the process of analyzing existing software, hardware, or other systems to recover their design, structure, and function, often using disassembly, decompilation, and dynamic analysis. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Can you design a chip? Announcing the protocol emulator ASIC competition DevFeed: [Can you design a chip? Announcing the protocol emulator ASIC competition]() Original publisher: [Read original article]() Author: Benjamin Devlin Published: 2026-09-10T00:00:00Z Content type: release Language: en Sources: [Jane Street]() Topics: [Chip design](), [Protocol (disambiguation)](), [Hardware](), [Open Source](), [Emulator](), [cpu](), [Reverse Engineering](), [fpga](), [Formal methods](), [Verilog]() Tags: [chip-design](), [cpu](), [emulator](), [ethernet](), [firmware](), [formal-methods](), [fpga](), [hardware](), [i2c](), [jtag](), [open-source](), [peripheral](), [protocol](), [reverse-engineering]() ### AI overview Jane Street announces a competition to design an open-source, general-purpose protocol emulator ASIC. The proposed chip would use a small programmable CPU to read and write pins, count cycles, and implement protocols in firmware, with fabrication planned through IHP and Tiny Tapeout. ### Source excerpt Last month, we asked you to reverse engineer a chip from nothing but its layout and teased a bigger challenge. Results and our favorite writeups are coming soon. In the meantime, here's our next challenge! This time, you're designing the chip, and we'll pay to fabricate our favorite designs! We're particularly interested in projects with unique functionality, as well as those that demonstrate novel approaches to design and verification methodologies! ## Reverse Engineering Without CAD Data: How MetroY Ultra Turns Physical Parts into Digital Designs (Sponsored) DevFeed: [Reverse Engineering Without CAD Data: How MetroY Ultra Turns Physical Parts into Digital Designs (Sponsored)]() Original publisher: [Read original article]() Author: Sponsored Post Published: 2026-09-07T10:00:42Z Content type: article Language: en Sources: [CNX Software - Embedded Systems News]() Topics: [Reverse Engineering](), [Software](), [3D]() Tags: [3d](), [diy](), [engineering](), [hardware](), [reverse-engineering](), [software](), [sponsored]() ### AI overview This sponsored article describes using MetroY Ultra and Revo Metro to scan a modified motorcycle rear fender and combine the cleaned scan with a full motorcycle scan in CAD software. The workflow preserves real mounting geometry while removing scan artifacts, creating a digital reference for designing a custom seat tray and seat pan. ### Source excerpt When the Part Exists, but the Data Doesn't Reverse engineering often starts with a physical part but no reliable digital data. In restoration and customization, manual measurement can provide basic dimensions, but it becomes limiting when complex curves, mounting points, and tight clearances need to be captured accurately. MetroY Ultra captures the actual three-dimensional geometry of a part, providing a reliable digital reference for reverse engineering, custom design, and manufacturing. Designing a Custom Motorcycle Seat Tray from Accurate Scan Data In a custom 1984 Honda CB400 build, the builder needed to create a seat tray and seat pan for a custom seat while integrating the rear fender into the modified rear subframe. The challenge was not simply designing a new part, but making that part accurately fit a motorcycle whose geometry had already been modified. Traditionally, this kind of work is often done with welded sheet metal or fiberglass layup. [...] The post Reverse Engineering Without CAD Data: How MetroY Ultra Turns Physical Parts into Digital Designs (Sponsored) appeared first on CNX Software - Embedded Systems News. ## What is Mobile App Reverse Engineering? | Guardsquare DevFeed: [What is Mobile App Reverse Engineering? | Guardsquare]() Original publisher: [Read original article]() Author: Guardsquare Published: 2026-08-25T10:43:34Z Content type: article Language: en Sources: [Guardsquare Blog]() Topics: [Reverse Engineering](), [Mobile Security](), [Mobile](), [Security](), [Ghidra](), [Hopper]() Tags: [analysis](), [android](), [dexguard](), [ios](), [ixguard](), [mobile](), [reverse-engineering](), [security](), [thought-leadership](), [tools](), [vulnerabilities]() ### AI overview The article explains mobile app reverse engineering as the analysis of compiled binaries to reconstruct an app's logic, data flows, and structure. It describes legitimate diagnostic uses, attacker risks such as credential extraction and vulnerability discovery, why iOS and Android protections do not fully protect application code, and static analysis using tools including Ghidra and Hopper. ### Source excerpt Reverse engineering is the process of analyzing compiled software to understand how it works, without having access to the original source code. In the context of mobile applications, it means taking a published app and working backward through its binary to reconstruct its internal logic, data flows, and structure. ## App Hardening: One Obfuscation Pipeline Across Every Port DevFeed: [App Hardening: One Obfuscation Pipeline Across Every Port]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-08-15T00:00:00Z Content type: article Language: en Sources: [CodeName One]() Topics: [obfuscation](), [cross-platform](), [Encryption](), [Security](), [Reverse Engineering](), [App]() Tags: [android](), [app](), [cross-platform](), [encryption](), [hardening](), [ios](), [javascript](), [native](), [obfuscation](), [platform](), [r8](), [reverse-engineering](), [security]() ### AI overview Codename One App Hardening applies one pre-build protection pipeline to a merged cross-platform application before it is split into Android, iOS, JavaScript, Windows, Linux, and desktop builds. It supports renaming, eligible string encryption, selected control-flow transformations, verification, and crash-report retracing, while acknowledging that reverse engineering cannot be made impossible. ### Source excerpt Codename One App Hardening applies class and member renaming, string encryption, and platform-safe control-flow transforms before one application becomes Android, iOS, JavaScript, or native desktop output. ## Reverse Engineering a PostHog SuperDay DevFeed: [Reverse Engineering a PostHog SuperDay]() Original publisher: [Read original article]() Author: Josh Sherman Published: 2026-08-09T00:00:00Z Content type: opinion Language: en Sources: [Josh Sherman]() Topics: [Reverse Engineering](), [Open Source](), [Software]() Tags: [engineering](), [open-source-software](), [oss](), [reverse-engineering]() ### AI overview The author describes examining PostHog's onboarding wizard and open-source repositories while trying to understand whether certain issues and pull requests were connected to potential candidates. The author remains uncertain about this theory but found the core team's constructive feedback notable. ### Source excerpt I'm not here to bullshit anybody, I have never been through a PostHog SuperDay. Like many humans, I've read about it on their website, as they are a company that over-communicates just about everything. This tale started when I got curious about their onboarding wizard. Their pivot from analytics to self-driving systems mirrors what I've been working on for the last couple of years, which has accelerated greatly over the last 3 months. Figured there was probably something I could learn and possibly bite off to include in my own system. Figuring out what to do I've been around open source software (OSS) for a good long while now. Even though I've had some strong opinions about the state of things over the years, I still believe it's the way. If not for OSS, I wouldn't be able to say things like "I wrote a Lorem Ipsum generator that's somehow been installed over 1 million times." These days, most projects have a label on their issues that indicate what's good for a new contributor to pick on. PostHog's repos are no different, except the repo I was looking at didn't have any issues tagged with the good first issue tag. Not a big deal, with 100+ open issues I figured I'd be able to find something I could pick up to give me a chance to play with the codebase. I did find a handful of things, I even started to chase down one of them. As I did I realized I kept talking myself out of each issue because what appeared to be low hanging fruit was stuff that I could defend deprioritizing. A pattern started to emerge Along this journey of trying to find an issue worth fighting for, I started to notice a pattern of somewhat disparate issues and PRs opened by the same contributor. I also noticed that core team members (read: employees) were commenting on these issues and PRs and not in the usual "yea or nay" fashion that I see. The comments were constructive in a way that you'd be with a more junior teammate that you're attempting to mentor and train up. Not a bad thing, but the fe ## Reverse-engineer an ASIC from its chip layout DevFeed: [Reverse-engineer an ASIC from its chip layout]() Original publisher: [Read original article]() Author: Anish Singhani Published: 2026-08-05T00:00:00Z Content type: article Language: en Sources: [Jane Street]() Topics: [Hardware](), [Reverse Engineering](), [Verilog](), [Routing (disambiguation)](), [Code]() Tags: [code](), [design-automation](), [engineering](), [hardware](), [puzzle](), [reverse-engineering](), [routing](), [signal]() ### AI overview Jane Street presents a puzzle that challenges readers to reverse-engineer an ASIC from its physical chip layout, recover the underlying netlist, determine the circuit's purpose, and derive a final answer from its output. ### Source excerpt Earlier this year we published a puzzle that handed you a complete neural network and asked you to figure out what it did. The response was great, so we've made another one! This time, we're going much deeper down the tech stack. For this puzzle we've designed a chip, but we're only giving you the layout. A crash course in how chips get made Modern chips start life as code. ## Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis? DevFeed: [Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?]() Original publisher: [Read original article]() Author: Juan Andrés Guerrero-Saade & Gabriel Bernadett-Shapiro Published: 2026-07-22T16:55:29Z Content type: article Language: en Sources: [SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms.]() Topics: [Artificial Intelligence](), [Malware](), [Reverse Engineering](), [Threat Research](), [Benchmark](), [Cybersecurity](), [OpenAI]() Tags: [ai](), [ai-models](), [analysis](), [benchmark](), [cybersecurity](), [malware](), [models](), [openai](), [reasoning](), [reverse-engineering]() ### AI overview A SentinelLABS benchmark evaluates whether frontier AI models can sustain trustworthy, long-horizon malware investigations as new evidence overturns earlier conclusions. OpenAI's GPT-5.6 Sol completed all eight stages, while other models showed capable local analysis but failed to maintain the investigation across the full workflow. The article concludes that supervised investigative agency is the most appropriate current use, with senior reverse engineers retaining oversight and publication authority. ### Source excerpt A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions. ## Mobile App Security Without Sacrificing UX | Guardsquare DevFeed: [Mobile App Security Without Sacrificing UX | Guardsquare]() Original publisher: [Read original article]() Author: Ryan Lloyd - Chief Product Officer Published: 2026-07-21T13:02:06Z Content type: article Language: en Sources: [Guardsquare Blog]() Topics: [Mobile Security](), [Application Security](), [Security](), [obfuscation](), [User experience (UX)](), [Reverse Engineering](), [Jailbreak](), [debug]() Tags: [application-security](), [jailbreak](), [mobile](), [obfuscation](), [performance](), [profiling](), [reverse-engineering](), [security](), [technical](), [time](), [ux]() ### AI overview The article explains how profiling instrumented mobile applications helps teams apply obfuscation and runtime security controls at appropriate levels while limiting effects on stability, performance, and user experience. It also discusses automating application profiling at scale through AI-driven and agentic testing. ### Source excerpt Mobile application security has evolved significantly over the past decade. Modern applications routinely employ code obfuscation, runtime application self-protection (RASP), anti-tampering controls, jailbreak and root detection, debugger detection, certificate pinning, and a variety of other runtime defenses designed to protect intellectual property and sensitive user data. ## Why OS-Level Security Isn't Enough for Mobile Apps | Guardsquare DevFeed: [Why OS-Level Security Isn't Enough for Mobile Apps | Guardsquare]() Original publisher: [Read original article]() Author: Simon Haven - Product Marketing Manager Published: 2026-07-14T12:36:57Z Content type: opinion Language: en Sources: [Guardsquare Blog]() Topics: [Mobile Security](), [Application Security](), [Security](), [Android](), [iOS](), [Reverse Engineering]() Tags: [android](), [application-security](), [attacks](), [dexguard](), [general](), [ios](), [ixguard](), [mobile-security](), [os](), [reverse-engineering](), [security]() ### AI overview The article argues that Android and iOS security protections primarily protect devices and users, but do not comprehensively verify whether mobile application code remains trustworthy after deployment. It recommends dedicated mobile application security alongside operating-system protections to reduce risks such as reverse engineering and runtime tampering. ### Source excerpt Since day one, Google and Apple have integrated security features into their respective operating systems, Android and iOS. However, as mobile devices have grown to become near ubiquitous, so, too, have the attacks targeting them. In 2025, 43% of surveyed organizations cited mobile app threats as a top contributor to mobile security breaches, according to a report by Verizon. In response, Google and Apple have continued introducing stronger and more refined security tools and features with each new release. ## LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine DevFeed: [LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine]() Original publisher: [Read original article]() Author: LABScon Published: 2026-06-02T13:00:58Z Content type: article Language: en Sources: [SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms.]() Topics: [LABScon](), [Malware](), [Threat Research](), [Reverse Engineering](), [Threat Hunting & Intel](), [backdoor]() Tags: [analysis](), [apt](), [attacks](), [backdoor](), [conferences](), [labscon](), [labscon25](), [malware](), [presentation](), [research](), [reverse-engineering]() ### AI overview ESET researchers present technical evidence that Gamaredon facilitated Turla's access to high-value Ukrainian targets between February and June 2025. The presentation examines their operational collaboration, the deployment of Turla's Kazuar backdoor, and the implications for defenders tracking Russian cyberespionage. ### Source excerpt ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FSB-linked espionage groups. ## Joining forces to modernize legacy software DevFeed: [Joining forces to modernize legacy software]() Original publisher: [Read original article]() Author: Mary Louise Stewart Published: 2026-05-14T08:00:00Z Content type: release Language: en Sources: [Federico Tomassetti]() Topics: [Software](), [Reverse Engineering](), [Refactoring](), [Code generation](), [interoperability](), [AI-assisted coding]() Tags: [code-generation](), [interoperability](), [legacy-code](), [legacy-modernization](), [migration](), [model-driven-development](), [modernization](), [parsing](), [refactoring](), [reverse-engineering](), [software](), [transpilers]() ### AI overview Strumenta and Metadev announced a collaboration to modernize legacy software. Strumenta contributes code analysis, extraction, and transformation capabilities, while Metadev contributes modeling, AI integration, and code generation. Their approach uses LionWeb models as an intermediate representation between legacy code and modernized systems. ### Source excerpt Strumenta and Metadev Join Forces to Modernize Legacy Software A collaboration combining Strumenta's expertise in code analysis, extraction, and transformation with Metadev's capabilities in modeling, artificial intelligence, and code generation from models. Torino/Seville, May 14, 2026 -- Strumenta S.r.l. and Metadev S.L. have reached a collaboration agreement to offer a joint approach to Modernizing Legacy [...] The post Joining forces to modernize legacy software appeared first on Federico Tomassetti. ## Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber DevFeed: [Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber]() Original publisher: [Read original article]() Published: 2026-05-07T13:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [Artificial Intelligence](), [OpenAI](), [Cybersecurity](), [Critical Infrastructure](), [vulnerability](), [Detection engineering](), [Reverse Engineering](), [Threat Research]() Tags: [ai](), [critical-infrastructure](), [cybersecurity](), [developers](), [engineering](), [openai](), [research](), [reverse-engineering](), [security](), [validation](), [vulnerability]() ### AI overview OpenAI describes Trusted Access for Cyber, an identity- and trust-based framework that provides verified defenders with enhanced GPT-5.5 capabilities for authorized cybersecurity workflows. GPT-5.5-Cyber is being introduced in limited preview for defenders securing critical infrastructure, with safeguards against activities such as credential theft, persistence, malware deployment, and exploitation of third-party systems. ### Source excerpt OpenAI expands Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber, helping verified defenders accelerate vulnerability research and protect critical infrastructure. ## pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI DevFeed: [pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI]() Original publisher: [Read original article]() Author: clearbluejar Published: 2026-05-05T07:00:00Z Content type: article Language: en Sources: [clearbluejar]() Topics: [Ghidra](), [Reverse Engineering](), [Local AI](), [MCP Server](), [Artificial Intelligence](), [Processes]() Tags: [ai](), [gemma4](), [ghidra](), [local](), [local-ai](), [mcp](), [mcp-server](), [reverse-engineering]() ### AI overview The article presents pyghidra-mcp v0.2.0, which adds a GUI-backed mode allowing a local LLM to drive a live Ghidra CodeBrowser across an entire project. It demonstrates real-time function renaming, plate comments, and cross-binary analysis, with edits recorded in Ghidra's undo history. ### Source excerpt pyghidra-mcp v0.2.0 ships a GUI-backed mode that lets a local LLM drive a live Ghidra CodeBrowser at full project scope. Renames, plate comments, and cross-binary pivots land in real time, with every edit tagged in Ghidra's undo history while the session is alive. ## Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights DevFeed: [Fetch the Flag CTF 2026: Official Challenge Write-Ups & Community Highlights]() Original publisher: [Read original article]() Author: Ben Sadeghipour (NahamSec) Published: 2026-02-23T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [ctf](), [Cybersecurity](), [Web](), [Artificial Intelligence](), [Reverse Engineering]() Tags: [ai](), [awareness](), [blog](), [ctf](), [cybersecurity](), [developer](), [interest](), [python](), [reverse-engineering](), [security](), [security-labs](), [web]() ### AI overview Fetch the Flag CTF 2026's official challenge write-ups and community highlights cover more than 20 challenges across web security, AI, crypto, pwn, reverse engineering, and forensics. The article points readers to intended solutions, community perspectives, and hands-on opportunities to retry challenges. ### Source excerpt Explore official write-ups and community highlights from the Fetch the Flag CTF 2026, featuring over 20 challenges in web security, AI, and crypto. Learn from the experts and dive into the technical details of this year's most intricate binary puzzles and web exploits. ## How LLMs Feed Your RE Habit: Following the Use-After-Free Trail in CLFS DevFeed: [How LLMs Feed Your RE Habit: Following the Use-After-Free Trail in CLFS]() Original publisher: [Read original article]() Author: clearbluejar Published: 2026-02-03T06:15:00Z Content type: tutorial Language: en Sources: [clearbluejar]() Topics: [Reverse Engineering](), [Large Language Model](), [vulnerability](), [race-condition](), [Windows](), [Kernel](), [Logging]() Tags: [ghidra](), [kernel](), [llms](), [macos](), [race-condition](), [reverse-engineering](), [vulnerability]() ### AI overview This article describes how LLMs and pyghidra-mcp support reverse engineering by tracing a use-after-free vulnerability in Windows Common Log File System (CLFS) through a patch diff. It explains CLFS, its Win32 and kernel-driver interfaces, and how a race condition can trigger the vulnerability. ### Source excerpt Dive into how LLMs and pyghidra-mcp accelerate reverse engineering by tracing a UAF vulnerability in CLFS through a patch diff. ## TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering DevFeed: [TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2025-12-17T23:00:00Z Content type: article Language: en Sources: [evilsocket]() Topics: [Reverse Engineering](), [Vulnerabilities](), [Security](), [Embedded Systems](), [Android](), [Amazon Web Services]() Tags: [ai](), [ai-assisted-reverse-engineering](), [android](), [assembly](), [aws](), [china](), [cve](), [cve-2025-14299](), [cve-2025-14300](), [cve-2025-8065](), [cybersecurity](), [embedded-devices](), [embedded-systems](), [exploit](), [firmware](), [ghidra](), [ghidramcp](), [hardcoded-credentials](), [integer-overflow](), [iot](), [iot-security](), [memory](), [mips](), [privacy](), [re](), [reverse-engineering](), [reversing](), [security](), [security-research](), [security-vulnerabilities](), [tapo-c200](), [tapo-camera](), [tp-link](), [tplink](), [vulnerability-research]() ### AI overview This article describes an AI-assisted reverse-engineering investigation of TP-Link Tapo C200 camera firmware. The author reports finding several security vulnerabilities affecting about 25,000 devices directly exposed on the internet, and discusses the tools and process used. ### Source excerpt Hi friends and welcome to the last post for this year! Whenever someone asks me how to get started with reverse engineering, I always giv ## An overview of the PPPP protocol for IoT cameras DevFeed: [An overview of the PPPP protocol for IoT cameras]() Original publisher: [Read original article]() Author: Wladimir Palant Published: 2025-11-05T15:11:36Z Content type: article Language: en Sources: [Almost Secure]() Topics: [Internet of things](), [Protocol (disambiguation)](), [P2P](), [Reverse Engineering](), [Security]() Tags: [cameras](), [firmware](), [iot](), [network](), [p2p](), [protocol](), [reverse-engineering](), [security-research](), [servers](), [tcp]() ### AI overview An overview of the PPPP protocol used primarily by network-connected IoT cameras. The article explains that PPPP relies on central servers while allowing bulk data transfer through direct client-to-device connections, and describes device identifiers, connection establishment, fallback mechanisms, redundant servers, and related protocol research. ### Source excerpt My previous article on IoT "P2P" cameras couldn't go into much detail on the PPPP protocol. However, there is already lots of security research on and around that protocol, and I have a feeling that there is way more to come. There are pieces of information on the protocol scattered throughout the web, yet every one approaching from a very specific narrow angle. This is my attempt at creating an overview so that other people don't need to start from scratch. While the protocol can in principle be used by any kind of device, it is mostly being used for network-connected cameras. It isn't really peer-to-peer as advertised but rather relies on central servers, yet the protocol allows to transfer the bulk of data via a direct connection between the client and the device. It's hard to tell how many users there are but there are lots of apps, I'm sure that I haven't found all of them. There are other protocols with similar approaches being used for the same goal. One is used by ThroughTek's Kalay Platform which has the interesting string "Charlie is the designer of P2P!!" in its codebase (32 bytes long, seems to be used as "encryption" key for some non-critical functionality). I recognize both the name and the "handwriting," it looks like PPPP protocol designer found a new home here. Yet PPPP seems to be still more popular than the competition, thanks to it being the protocol of choice for cheap low-end cameras. Disclaimer: Most of the information below has been acquired by analyzing public information as well as reverse engineering applications and firmware, not by observing live systems. Consequently, there can be misinterpretations. Contents The general design The network ports The device IDs The protocol variants CS2 Network Yi Technology iLnk HLP2P "Encryption" "Secret" messages Applications Changelog The general design The protocol's goal is to serve as a drop-in replacement for TCP. Rather than establish a connection to a known IP address (or a name to be resolved ## pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis DevFeed: [pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis]() Original publisher: [Read original article]() Author: clearbluejar Published: 2025-08-19T15:56:00Z Content type: release Language: en Sources: [clearbluejar]() Topics: [Ghidra](), [Reverse Engineering](), [MCP Server](), [Model Context Protocol](), [Large Language Model](), [Artificial Intelligence](), [Automation](), [agentic workflows]() Tags: [agentic](), [automated](), [engineering](), [ghidra](), [llm](), [mcp](), [mcp-server](), [reverse-engineering]() ### AI overview The article introduces pyghidra-mcp, a headless Model Context Protocol server for Ghidra. It is designed for automation and exposes an entire Ghidra project so an LLM can trace function calls across multiple interdependent binaries in one analysis session. ### Source excerpt Unlock project-wide, multi-binary analysis with pyghidra-mcp, a headless Ghidra MCP server for automated, LLM-assisted reverse engineering. ## Obfuscation Deep Dive: Enhancing R8 and ProGuard for Robust Android Code Protection DevFeed: [Obfuscation Deep Dive: Enhancing R8 and ProGuard for Robust Android Code Protection]() Original publisher: [Read original article]() Author: Kirill Rozov Published: 2025-05-19T07:40:40Z Content type: tutorial Language: en Sources: [Stories by Kirill Rozov on Medium]() Topics: [Android](), [obfuscation](), [R8](), [Reverse Engineering](), [Java](), [Optimization](), [configuration]() Tags: [android](), [configuration](), [java](), [obfuscation](), [optimization](), [proguard](), [r8](), [reverse-engineering](), [security]() ### AI overview This tutorial explains how R8 and ProGuard obfuscate Android applications and why their default naming dictionaries can make reverse engineering easier. It presents custom dictionary configuration, Java reserved-keyword names, invalid Windows filename names, and per-build randomized dictionaries, while noting compatibility and testing risks. ### Source excerpt Obfuscation is a crucial aspect of securing Android applications. While tools like R8 and ProGuard are commonly used, their default configurations primarily aim to reduce app size rather than fortify code against reverse engineering. This article delves into advanced obfuscation techniques to make reverse engineering harder. Understanding Obfuscation Obfuscation transforms readable code into a form that's difficult to interpret. For instance, UserManager might become a, and getUser() could be renamed to b(). R8 and ProGuard perform obfuscation alongside code shrinking and optimization. # R8/ProGuard default dictionary a b c ... z These tools use dictionaries to generate new names, typically starting with single letters (a to z) and progressing to combinations like aa, ab, etc. While this approach minimizes file size, it has drawbacks: Predictable Naming: Limited name variations make it easier to deduce original identifiers. Consistent Builds: Repeated builds produce identical obfuscated names, aiding pattern recognition. Simplified Reverse Engineering: Tools can exploit naming patterns across builds. To counter these issues, customizing the obfuscation dictionary is essential. Implementing Custom Dictionaries R8 and ProGuard allow the use of custom dictionaries via configuration files: # proguard-rules.txt # Add to R8/ProGuard config file -obfuscationdictionary obfuscation-dictionary.tx -classobfuscationdictionary class-dictionary.txt -packageobfuscationdictionary package-dictionary.txt By providing unique dictionaries, you can generate diverse and unpredictable obfuscated names. Advanced Dictionary StrategiesJava Reserved Keywords Using Java's reserved keywords (e.g., if, for, class) as obfuscated names can confuse decompilers, as these are invalid identifiers in source code but acceptable in bytecode. # Java Reserved Keywords dictionary do if for int new ... instanceof synchronized Example of deobfucated Java code with java reserved keywords dictionary package cla ## CVE-2025-31212 Let iOS Apps Access Nearby Bluetooth LE Data Before Consent DevFeed: [CVE-2025-31212 Let iOS Apps Access Nearby Bluetooth LE Data Before Consent]() Original publisher: [Read original article]() Published: 2025-05-12T20:20:00Z Content type: opinion Language: en Sources: [Rambo Codes]() Topics: [Vulnerabilities](), [Bluetooth LE](), [iOS](), [Reverse Engineering]() Tags: [bluetooth-le](), [ios](), [privacy](), [reverse-engineering](), [vulnerabilities]() ### AI overview Gui Rambo describes CVE-2025-31212, an iOS vulnerability that allowed an app to obtain information about nearby Bluetooth LE devices before the user granted permission. ### Source excerpt Gui Rambo writes about his coding and reverse engineering adventures. ## A Simple iOS Vulnerability Involving Darwin Notifications DevFeed: [A Simple iOS Vulnerability Involving Darwin Notifications]() Original publisher: [Read original article]() Published: 2025-04-26T14:00:00Z Content type: article Language: en Sources: [Rambo Codes]() Topics: [iOS](), [Vulnerabilities](), [Reverse Engineering](), [Exploit](), [Processes]() Tags: [apple](), [exploit](), [ios](), [iphone](), [processes](), [reverse-engineering]() ### AI overview The article describes an iOS vulnerability involving Darwin notifications, a legacy public API that enables low-level message exchange and shared state between processes on Apple operating systems. It explains that processes can register for notifications without special entitlements, including from within an iOS sandbox. ### Source excerpt Gui Rambo writes about his coding and reverse engineering adventures. ## Halloween Spooktacular: Fog Machine Madness DevFeed: [Halloween Spooktacular: Fog Machine Madness]() Original publisher: [Read original article]() Author: James Heller Published: 2023-09-26T21:50:49Z Content type: article Language: en Sources: [Apartment 304]() Topics: [circuit](), [Microcontroller](), [Reverse Engineering](), [Hardware](), [MIDI](), [Requirements]() Tags: [apartment-304](), [circuit](), [custom-software-solutions](), [devops](), [devops-engineer](), [electronics](), [hardware](), [requirements](), [reverse-engineering](), [software-architecture](), [software-development](), [software-engineer]() ### AI overview A Halloween automation project uses reverse engineering and circuit design to control a fog machine when trick-or-treaters are nearby. The article describes investigating the machine's 5-pin MIDI remote, designing a circuit with a microcontroller and LEDs, and isolating the connections to protect the controller from potentially damaging voltages. ### Source excerpt Go, k3s, NATS, circuit design, and fog. Oh the madness. A tale of over engineering. ## macOS Security Bugs Exposed Safari History and Device Location to Unauthorized Apps DevFeed: [macOS Security Bugs Exposed Safari History and Device Location to Unauthorized Apps]() Original publisher: [Read original article]() Published: 2023-04-04T18:00:00Z Content type: article Language: en Sources: [Rambo Codes]() Topics: [macOS](), [Security](), [Vulnerabilities](), [Reverse Engineering]() Tags: [cve](), [cves](), [macos](), [macos-security](), [reverse-engineering](), [safari](), [security]() ### AI overview This article examines Apple operating-system security vulnerabilities, including CVE-2023-23506/28192, involving improper validation of clients by XPC services. It explains how assumptions about local XPC service isolation can fail and discusses the potential exposure of sensitive data. ### Source excerpt Gui Rambo writes about his coding and reverse engineering adventures. ## Make SBOMs, not GuessBOMs: Why we need to shift left on SBOM generation DevFeed: [Make SBOMs, not GuessBOMs: Why we need to shift left on SBOM generation]() Original publisher: [Read original article]() Published: 2023-01-26T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [software bill of materials](), [supply-chain-security](), [software dark matter](), [vulnerability management](), [Reverse Engineering](), [Containers]() Tags: [apko](), [chainguard-images](), [container-security](), [guessbom](), [melange](), [reverse-engineering](), [sbom](), [sboms](), [sca](), [shift-left](), [software-composition-analysis](), [software-dark-matter](), [software-supply-chain](), [vulnerability]() ### AI overview The article argues that SBOMs generated after a build by software composition analysis tools can be incomplete because they may miss components that bypass recorded metadata, such as files copied through Dockerfiles. It presents build-time generation as a better way to produce complete SBOMs and describes untracked files as software dark matter, which can make post-build SBOMs closer to best guesses than reliable inventories. ### Source excerpt GuessBOMs, SBOMs generated by reverse-engineering software artifacts, have severe limitations. The optimal point for generating complete SBOMs is at build time. [Next page]()