Advertisement · 728 × 90

Posts by Romain Thomas (@rh0main)

Preview
A Glimpse Into DexProtector | Romain Thomas This blog post provides a high-level overview of DexProtector's security features and their limitations

I reverse engineered DexProtector, the security solution protecting applications like Revolut and other banking apps.

From custom ELF loaders to vtable hooking, here is an insight into how these protections work and their limitations.

www.romainthomas.fr/post/26-01-d...

3 months ago 34 12 0 0
Post image

I'm happy to share that LIEF 0.17.0 is out: lief.re/blog/2025-09...

7 months ago 14 5 0 0
Preview
LIEF patchelf This blog post introduces a modern LIEF-based version of patchelf

New blog post on implementing patchelf-like functionalities using LIEF's Rust bindings:

lief.re/blog/2025-07...

9 months ago 3 2 0 0
Preview
DWARF as a Shared Reverse Engineering Format This blog post introduces a new API in LIEF to create DWARF files

[Blog Post] New high-level API in LIEF that allows the
creation of DWARF files. Additionally, I present two plugins designed to export
program information from Ghidra and BinaryNinja into a DWARF file.

lief.re/blog/2025-05...

(Bonus: DWARF file detailing my reverse engineering work on DroidGuard)

10 months ago 22 15 1 0
Post image

Fuzzing Windows ARM64 binaries with a DBI and LLVM?
Here we go: www.romainthomas.fr/post/25-04-w...

11 months ago 4 5 0 0
Post image

New updates in LIEF including better support for PE modifications and ARM64EC/ARM64X binaries.

Blog post: lief.re/blog/2025-02...

1 year ago 8 4 0 0

Want to support security researchers from Dragon Sector in covering legal costs piling up after they went public with logic bombs in train firmware?
IBAN for donations is available here:
www.ccc.de/en/updates/2...

Talks for context
media.ccc.de/v/37c3-12142...
streaming.media.ccc.de/38c3/relive/...

1 year ago 36 18 0 1
Preview
Privacy is Priceless, but Signal is Expensive Signal is the world’s most widely used truly private messaging app, and our cryptographic technologies provide extra layers of privacy beyond the Signal app itself. Since launching in 2013, the Signal...

And if you want to know more about the economic reality behind running high availability, actually innovative tech… signal.org/blog/signal-...

1 year ago 136 39 2 6
Post image

LIEF 0.16.0 is out featuring new (extended) capabilities like Dyld Shared Cache support, Assembler/disassembler, ...

lief.re/blog/2024-12...

1 year ago 9 5 0 0

It would make a nice combo!

1 year ago 1 0 1 0
Advertisement
LIEF Disassembler API based on LLVM MC

LIEF Disassembler API based on LLVM MC

So for my first post on Bluesky, I'm happy to share that LIEF (extended) is now providing an API to disassemble code (backed by the LLVM MC layer).

This disassembler is integrated with other functionalities
like dyldsc or DWARF info.

You can checkout lief.re/doc/latest/e... for the details.

1 year ago 30 9 1 1