Research & Development
We tear malware apart and build the tools to keep your code from getting torn apart. Every writeup, YARA rule, and reverse-engineering note we produce lives on GitHub — free, no paywall, no signup.
Latest research
▶ 01-pipeline.mp4: end-to-end flow at a glance. Some background reading if you want it. None of it's required. You don't actually have to reverse PyArmor's format. Just let the ru…
The file is built by a free Vietnamese obfuscator that credits itself as "AnhNguyenCoder x Mano x Duy Nhật(Ligga)" and brands its classes __PyTiㅤAbi__. In this post I want to...
This is my first time reverse engineering a captcha, so some of the technical claims in this article might be wrong. If Cloudflare wants this post taken down, I will...
What We Do
The research stays open. The tools we'd want to buy ourselves are what we plan to sell.
Everything we publish — malware writeups, YARA rules, reverse-engineering notes — lives in a public GitHub repo. No paywall, no signup, no email capture.
A protection SDK, automated unpackers, and analysis utilities — the same engineering, productized. Sold separately when they're ready, not before.
Commercial license — priced independently
Network
