nicolodev
LightNews LightNews
nicolo.dev
nicolodev
@nicolo.dev
22 followers 23 following 5 posts
Reverse Engineer – Passion for decompiler, disassembler, and anything that breaks software

Blog: https://nicolo.dev
Posts Replies Media Videos
Pinned
nicolo.dev
nicolodev @nicolo.dev · Feb 9
Disassembly algorithms are often a trade-off. My new blog post analyzes linear sweep and recursive traversal, exploring their strengths and weaknesses in a self-built disassemblers.

nicolo.dev/en/blog/disa...
Disassembling a binary: linear sweep and recursive traversal
Building your own set of analysis tools is a great exercise for those who already have some basics and allows you to later move on to implement more targeted analyses in reverse engineering. Even just...
nicolo.dev
nicolo.dev
It was a great honor to share the stage with Tim to present MBA deobfuscation using our powerful BinaryNinja plugin.

An incredible experience at REcon 2025 — thank you to everyone who made it unforgettable! Check out the recording!
October 18, 2025 at 9:42 AM
Reposted by nicolodev
nicolo.dev
We just presented our new Binary Ninja plugin for deobfuscation of Mixed Boolean Arithmetic expressions at REcon25. Check it out!
mrphrazer.bsky.social Tim Blazytko @mrphrazer.bsky.social · Jun 27
The slides from our @reconmtl.bsky.social talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolo.dev ), are now online!

Slides: synthesis.to/presentation...

Plugin: github.com/mrphrazer/ob...
June 28, 2025 at 2:25 PM
nicolo.dev
We just presented our new Binary Ninja plugin for deobfuscation of Mixed Boolean Arithmetic expressions at REcon25. Check it out!
mrphrazer.bsky.social Tim Blazytko @mrphrazer.bsky.social · Jun 27
The slides from our @reconmtl.bsky.social talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolo.dev ), are now online!

Slides: synthesis.to/presentation...

Plugin: github.com/mrphrazer/ob...
June 28, 2025 at 2:25 PM
Reposted by nicolodev
nicolo.dev
Control Flow Graph is a critical element for any binary analysis framework, but its role has been underestimated sometimes (I'm looking at you, Ghidra!).

nicolo.dev/en/blog/role...
The Role of the Control Flow Graph in Static Analysis
The flow control graph is an important building block in static program analysis for applying a variety of analyses that consider the flow of a program. The “flow”, described informally, represents the evolution of the program during execution time, that is, at which the CPU jumps in order to continue program execution. The graph (also called CFG for brevity) allows the first high-level elements of software to be derived in a general way from a low- or medium-level representation (we cite as an example assembly code or intermediate code). High-level elements include high-level loops (while or for loops) and execution branches (switch, if, else) that can be critical in identifying how execution evolves over time.
nicolo.dev
February 19, 2025 at 6:27 PM
Reposted by nicolodev
mrphrazer.bsky.social
New #BinaryNinja plugin: Obfuscation Analysis

Simplifies arithmetic obfuscation (MBA) directly in the decompiler (see demo below). Also identifies functions with corrupted disassembly.

Co-authored by @nicolo.dev; available in the plugin manager.

github.com/mrphrazer/ob...
May 25, 2025 at 9:39 PM
Reposted by nicolodev
nicolo.dev
Excited to announce that together with Tim Blazytko, our talk has been accepted to REcon 2025! Don't miss this opportunity to learn how to break Mixed Boolean Arithmetic expressions :)
mrphrazer.bsky.social Tim Blazytko @mrphrazer.bsky.social · Apr 7
At @reconmtl.bsky.social, @nicolo.dev and I discuss the current state of MBA (de)obfuscation and their applications. We’ll also introduce a new #BinaryNinja plugin for simplifying MBAs in the decompiler.

Details: cfp.recon.cx/recon-2025/f...

I'll also give a training: recon.cx/2025/trainin...
April 7, 2025 at 4:14 PM
nicolo.dev
Excited to announce that together with Tim Blazytko, our talk has been accepted to REcon 2025! Don't miss this opportunity to learn how to break Mixed Boolean Arithmetic expressions :)
mrphrazer.bsky.social Tim Blazytko @mrphrazer.bsky.social · Apr 7
At @reconmtl.bsky.social, @nicolo.dev and I discuss the current state of MBA (de)obfuscation and their applications. We’ll also introduce a new #BinaryNinja plugin for simplifying MBAs in the decompiler.

Details: cfp.recon.cx/recon-2025/f...

I'll also give a training: recon.cx/2025/trainin...
April 7, 2025 at 4:14 PM
Reposted by nicolodev
mrphrazer.bsky.social
At @reconmtl.bsky.social, @nicolo.dev and I discuss the current state of MBA (de)obfuscation and their applications. We’ll also introduce a new #BinaryNinja plugin for simplifying MBAs in the decompiler.

Details: cfp.recon.cx/recon-2025/f...

I'll also give a training: recon.cx/2025/trainin...
April 7, 2025 at 4:13 PM
Reposted by nicolodev
nicolo.dev
Disassembly algorithms are often a trade-off. My new blog post analyzes linear sweep and recursive traversal, exploring their strengths and weaknesses in a self-built disassemblers.

nicolo.dev/en/blog/disa...
Disassembling a binary: linear sweep and recursive traversal
Building your own set of analysis tools is a great exercise for those who already have some basics and allows you to later move on to implement more targeted analyses in reverse engineering. Even just...
nicolo.dev
February 9, 2025 at 10:40 AM
nicolo.dev
Control Flow Graph is a critical element for any binary analysis framework, but its role has been underestimated sometimes (I'm looking at you, Ghidra!).

nicolo.dev/en/blog/role...
The Role of the Control Flow Graph in Static Analysis
The flow control graph is an important building block in static program analysis for applying a variety of analyses that consider the flow of a program. The “flow”, described informally, represents the evolution of the program during execution time, that is, at which the CPU jumps in order to continue program execution. The graph (also called CFG for brevity) allows the first high-level elements of software to be derived in a general way from a low- or medium-level representation (we cite as an example assembly code or intermediate code). High-level elements include high-level loops (while or for loops) and execution branches (switch, if, else) that can be critical in identifying how execution evolves over time.
nicolo.dev
February 19, 2025 at 6:27 PM
nicolo.dev
Disassembly algorithms are often a trade-off. My new blog post analyzes linear sweep and recursive traversal, exploring their strengths and weaknesses in a self-built disassemblers.

nicolo.dev/en/blog/disa...
Disassembling a binary: linear sweep and recursive traversal
Building your own set of analysis tools is a great exercise for those who already have some basics and allows you to later move on to implement more targeted analyses in reverse engineering. Even just...
nicolo.dev
February 9, 2025 at 10:40 AM