0x10Work

Research and case studies

Each case study states the question, what I did, what came out, and what I got wrong on the way.

Stripped but not Silent

An early, exploratory comparison of how five reverse engineering tools handle library information in stripped Rust malware.

91 samples · 5 tools compared · exploratory

Malware reverse engineering

Akira v2, read from the binary

Akira's Rust rewrite, taken apart at byte level: struct layouts from drop glue, the real crypto stack, and the author's code inside 3,274 functions.

~12 author functions found in 3,274 · 32-byte struct recovered from drop glue

Vulnerability research

A stack overflow that never reaches RIP

Root-causing a crash in a vulnerable C server under GDB, and finding it does not fail the way the textbook says.

Crash at 264 B, canary trips at 137 B · 32 checks, 3 of my claims failed

Vulnerability research

Rust memory-safety bugs, reproduced and measured

Reproducing CVE-2021-25900 in smallvec under Miri, and measuring when an unsafe Rust bug is visible at all.

CVE-2021-25900 reproduced · unsafe out-of-bounds read exits 0 in release

Detection engineering

A daily Rust malware dossier, with detections

An AI research agent that writes one defensive dossier a day on Rust malware, each with YARA, Sigma and Sentinel KQL detections mapped to MITRE ATT&CK.

82 dossiers · 259 YARA and 215 Sigma rules · 191 ATT&CK techniques

Tooling

Mastering Binary Ninja: scripting to AI-assisted RE

A practical guide to automating reverse engineering with Binary Ninja's Python API and AI integration, built around 16 working scripts.

16 scripts · from console basics to headless batch analysis