Hell Diner
@DinerHell
Followers
411
Following
529
Media
9
Statuses
115
24 yo, reverse-engineering and low-level exploitation enthusiast 🇫🇷
France
Joined March 2020
🔥Release 1.0.1-alpha of Arion is out🔥 https://t.co/AKq90X2JV6 The C++ emulation framework has many new features and is getting more and more stable. Here is a short thread about the main additions :
1
9
25
Binary Ninja 5.1 is now released: https://t.co/uz9iAtJJzG - New WARP function matching - Pseudo Objective-C - Binexport plugin built-in - IL Rewriting Examples, APIs, and Docs - Arch: PPC VLE, mips-r5900, x32 + Much more!
binary.ninja
Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.
3
64
272
We just presented our new Binary Ninja plugin for deobfuscation of Mixed Boolean Arithmetic expressions at REcon25. Check it out!
The slides from our @reconmtl talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolodev), are now online! Slides: https://t.co/O9s6ItbHFw Plugin: https://t.co/cek4bXbNyB
0
12
71
Many other features were implemented like running processes as part of groups (preparing IPC for a future release), a total rework of the threading and signals modules and tests were implemented with Google tests framework to gain stability. 🔥Feel free to contribute 🔥
0
0
0
5/ Rootfs and GCC/G++ toolchains Some rootfs for supported architectures are now available (users can choose to download or build them). They come along with GCC/G++ static cross toolchains to make compilation easier.
1
0
0
4/ Baremetal mode With the new baremetal mode, you can chose to whether map all the segments by hand or easily map a shellcode to emulate it.
1
0
0
3/ Syscall logging When arion is launched in debug mode, syscalls are now displayed with their parameters and many kernel types have been integrated to make reading easier.
1
0
0
2/ Gdbserver It is very useful to be able to switch between an emulation context and a debugging context. This is what udbserver allows and it is now integrated into Arion.
1
0
0
1/ Fuzzing Thanks to UnicornAFL implementation, Arion now supports fuzzing through AFL. The performance is very good compared to Qiling (8 vs 109 exec/s), the screenshots below were taken on fuzzing the same binary under the same conditions.
1
0
1
🎉 Success! @Synacktiv has rated @epieos' overall security as #HIGH! At @epieos, the #security of our clients is our top #priority. 🛡️ As part of our annual penetration testing process, we commissioned @Synacktiv, one of the most renowned #cybersecurity firms in the world, to
1
4
20
Je termine premier dans la catégorie reverse junior au FCSC 2025 ! J'ai publié sur mon blog deux write-ups de challenges que j'ai trouvés intéressants. N'hésitez pas à aller y jeter un oeil :-) - https://t.co/nRi2v1LfN3 - https://t.co/nqaMIiIxgP
4
6
52
For @MidnightFlag CTF I created a kernel exploitation challenge that involves bypassing PAC in Linux kernel, here is the write-up :
0
34
133
🏆 WINNERS!! Congratulations to the "Esnarcotrafiquants" team, representing 🇫🇷 @EsnaBretagne, for winning the 2025 #EuropeanCyberCup. 🕵️ This competition, featuring multiple cyber challenges and held during the @FIC_eu, has established itself as one of the most prestigious in
0
2
14
Bravo à l'équipe des esnarcotrafiquants, grands gagnants de cette édition 2025 de l'European Cyber Cup ! 🏆 🔥 Il y a comme un air de déjà vu, n'est-ce pas @EsnaBretagne... ? #EC22025 #europeancybercup
3
14
35
GG aux Esnarcotrafiquants pour leur victoire à l'@EuCyberCup ! Je mets ici une belle photo, parce que celle sur le post de @EuCyberCup est un peu bof 🥲 Bravo aussi aux @phreaks2600 et @Oterihack pour le podium ! Et à toutes les équipes participantes pour le fun.
1
6
44
More than 120 syscalls are now implemented in Arion and a lot of hook capabilities are present. A wiki and a documentation should come soon, for the moment you can relate in the examples from Github. Plenty of features will be implemented by the future so feel free to contribute.
0
0
0
Here are some graphs comparing execution times between Arion (in blue) and Qiling (in red). In the first one, the variable is the amount of basic blocks in the target when they are all hooked and in the second one the variable is the amount of hit syscalls.
1
0
0
In this very first version, Arion covers the following architectures for ELF files under Linux: - x86 - x86-64 - ARM - ARM64 Packages (.deb and .rpm) are available for Debian, Ubuntu and Fedora on Github in the releases tab.
1
0
0
🔥Introducing Arion🔥 A high-performance C++ framework for emulating executable binaries. Based on Unicorn and inspired by Qiling, Arion offers an easy-to-use interface and super low execution times making it a great ally for fuzzing or other applications. https://t.co/EdIIaJqt91
2
21
54