Official account of the VulHunt development team.

VulHunt retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release provides new APIs and bug fixes. Thanks to new and existing contributors @mcbbugu, Amaan Qureshi, and @0xdea for their work on this release. github.com/idalib-rs/idalib.…
2
19
90
5,016
VulHunt retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release adds compatibility with latest SDK (v9.4), and a couple of bug fixes. Thanks to @0xdea and @yeggorv for their contributions. github.com/idalib-rs/idalib.…
21
96
8,054
VulHunt retweeted
Writing Rust-based IDA plugins is as simple as implementing IDAPlugin and using an attribute macro to define metadata. The crate handles the rest!
4
21
1,309
VulHunt retweeted
We're pleased to announce a new release of our #Rust bindings for @HexRaysSA IDA Pro! This release adds compatibility with latest SDK, and introduces a Rust-native interface for developing plugins. github.com/idalib-rs/idalib
2
17
63
4,866
VulHunt retweeted
Why create another metric? Traditional scoring systems are often rigid, opaque, and narrow in scope. They may not reflect product-specific requirements, differences across ecosystems such as firmware and cloud containers, or the realities of an evolving threat landscape.
1
3
5
390
VulHunt retweeted
BRS unifies diverse security signals into a single normalized risk score, making it easier to compare otherwise disparate finding types side by side. By combining existing models and metrics, it delivers a more consistent way to assess risk across environments.
1
3
4
361
VulHunt retweeted
What sets BRS apart is its flexibility and transparency. It is configured through product-, organization-, or ecosystem-specific risk profiles and is built to incorporate a wide range of existing metrics.
4
5
499
VulHunt retweeted
Relying on a single metric like CVSS or EPSS can miss critical product or organizational context. BRS brings consistency to comparing different risks, such as a known high-severity vulnerability with a PoC versus a potential zero-day.
1
3
4
500
VulHunt retweeted
Slides and demos for our @REverseConf talk by @francesco_ev and @xorpse are up! If you missed the conference, now's you're opportunity to take a look at the talk content and demos. Slides & demos: github.com/binarly-io/Resear… VulHunt framework: vulhunt.re
19
26
4,906
VulHunt retweeted
Each of these examples are documented step-by-step in our user guide: vulhunt.re/docs/user-guide/v…
As part of our vulhunt.re release, we've also dropped few rules! First up is a rule to detect a #LogoFAIL variant (CVE-2023-40238) in a UEFI DXE driver for BMP decoding... Test case(s): github.com/vulhunt-re/tests/… Rule: github.com/vulhunt-re/rules/…
4
10
1,667
VulHunt retweeted
...and, finally, a rule for the very recent authentication bypass in telnetd (CVE-2026-24061). Test case(s): github.com/vulhunt-re/tests/… Rule: github.com/vulhunt-re/rules/…
3
8
739
VulHunt retweeted
Next up is a rule for #regreSSHion (CVE-2024-6387), showcased on an ARM binary, but we've got test cases covering all of VulHunt's supported architectures (x86, x86-64, AArch64, ARM/Thumb). Test case(s): github.com/vulhunt-re/tests/… Rule: github.com/vulhunt-re/rules/…
2
3
11
906
VulHunt retweeted
As part of our vulhunt.re release, we've also dropped few rules! First up is a rule to detect a #LogoFAIL variant (CVE-2023-40238) in a UEFI DXE driver for BMP decoding... Test case(s): github.com/vulhunt-re/tests/… Rule: github.com/vulhunt-re/rules/…
1
7
15
6,104
VulHunt retweeted
Our aim is to build a community and ecosystem around VulHunt to provide a comprehensive toolkit and rule collection that aids researchers and practitioners performing any kind of binary analysis. Give it a try!
2
13
1,086
VulHunt retweeted
VulHunt is the culmination of 4 years of R&D with a goal to scale vulnerability detection in binaries. While the foundation is built on tried and true static analysis techniques, we’ve embraced the AI era and expose VulHunt’s capabilities to agents and tools via MCP and skills.
1
5
27
1,713
VulHunt retweeted
The dream of a fast and reliable binary analysis framework is now a reality. Today, we’re open sourcing VulHunt.RE 🎉 code: github.com/vulhunt-re/vulhun… docs: vulhunt.re/docs A huge kudos to the entire REsearch team!
This year at @REverseConf, we’re dropping something special, a project we’ve been heads-down on for a while that boosts semantic-level binary detection with reachability + taint analysis. Like CodeQL/Semgrep, but for binaries. VulHunt use cases: Vuln REsearch: binarly.io/blog/vulnerabilit… Detection Eng: binarly.io/blog/vulhunt-in-p… VH Intro: binarly.io/blog/vulhunt-intr…
4
93
374
36,709