0x20Writing
Writing
Notes on Rust internals, binary analysis and malware reverse engineering. Posts first published on Medium are reproduced here in full, each linking to its original.
-
What Happens to Rust Ownership When You Compile It? A binary analysis of drop flags, drop glue, and the erasure of borrow semantics across debug and release builds.11 min read
-
Reversing Akira's Rust Experiment: A Breakdown, Part 3 A breakdown and commentary on Check Point Research's analysis of Akira ransomware's Rust rewrite.34 min read
-
Reversing Akira's Rust Experiment: A Breakdown, Part 2 A breakdown and commentary on Check Point Research's analysis of Akira ransomware's Rust rewrite.38 min read
-
Decoding UTF-8 Hex Strings in Python When reverse engineering binaries, you often encounter raw hex bytes in .rodata that represent Unicode strings. Binary Ninja and similar tools sometimes render these as dots or garbage rather than…3 min read
-
Demangling the Symbol in Rust Binary: <alloc::string::FromUtf8Error as …> Demangling <alloc::string::FromUtf8Error as core::fmt::Debug>::fmt::<hash>, a symbol found while reversing Akira's Rust build.5 min read
-
Interesting instructions in Rust binary: lock cmpxchg The story starts when I reverse engineer a “normal” Rust binary (release build, MCVC x64 PE), also inspected a tab “Tags” in Binary Ninja.8 min read
-
Assembly Breakdown: x86-64 structure alignment examples When you declare a struct in C, the compiler does not simply pack the members back-to-back in memory. It inserts padding bytes to ensure each member sits at an address that is a multiple of its…5 min read
-
Reversing Akira's Rust Experiment: A Breakdown, Part 1 A breakdown and commentary on Check Point Research's analysis of Akira ransomware's Rust rewrite.43 min read
-
Voldemort Type in Rust, C/C++, Zig, Go and Haskell A type that must not be named: what Voldemort types are, and how Rust, Zig, C, C++, Go and Haskell express them.2 min read
-
Rust Syntax Sugars That Make Your Code Sweeter Understanding the magic behind Rust’s concise and readable syntax.3 min read