PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

IDA Pro Tips to Add to Your Bag of Tricks

swarm.ptsecurity.com | research | #reverse-engineering | #tooling | #tips | #ida-pro
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A grab bag of practical IDA Pro tips from PT SWARM's reverse engineers: fixing struct alignment with #pragma pack(1), Alt+T full-text search across pseudocode and structures, rebasing misloaded firmware via Edit > Segments > Rebase, and more workflow tricks.
Published
Collected

Related coverage

research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · volexity.com
GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically
# GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically April 1, 2025 Killian Raimbaud and Paul Rascagneres In the course of its investigations, Volexity...
research · projectzero.google
Windows Tooling Updates: OleView.NET
An update on OleView.NET, a .NET tool for inspecting COM objects and OLE interactions on Windows, covering new features that assist security research and boundary analysis.
Back