GOD MODE UNLOCKED: hardware backdoors in some x86 CPUs github.com/xoreaxeaxeax/r… White paper coming tomorrow. Black Hat

REpsych: steganography, obfuscation, and psychological warfare via control flow graph manipulation, now on github: github.com/xoreaxeaxeax/R…

(i.e. how to talk to a reverse engineer)

M/o/Vfuscator2 includes a mov-only floating point emulator. So I built a 3d graphics engine. Here's a spinning cube:

M/o/Vfuscator updated with instruction & register shuffling to prevent (simple) decompilation github.com/xoreaxeaxeax/m…

x86 XOR is turing complete, so here's the XORfuscator - compiles C into xors, and only xors: github.com/xoreaxeaxeax/m…

x86 SUB is turing complete, so here's the SUBfuscator - compiles C into subs, and only subs: github.com/xoreaxeaxeax/m…

the ADDfuscator was a little tricky: github.com/xoreaxeaxeax/m…

the AND/ORfuscator... github.com/xoreaxeaxeax/m…

the rrrrrrfuscator compiles C to 1-bit shifts... github.com/xoreaxeaxeax/m…

XADD-, SBB-, ADC-, and PUSH/POP- fuscators... github.com/xoreaxeaxeax/m…

and of course, the cmpxchgxchgfuscator... github.com/xoreaxeaxeax/m…

and the randomfuscator just randomly throws crap together: github.com/xoreaxeaxeax/m… (HT Ange @f4grx)

Hmm. All programs reduce to the same instruction stream. Left, AES; right, Minesweeper. github.com/xoreaxeaxeax/r…

copy/paste/search/replace are turing-complete so, brainf@!# interpreter, in vanilla vim. github.com/xoreaxeaxeax/v…

I'll be demonstrating the first x86 'killer poke' instruction found in 20 years at #BHUSA next week; processor DoS from ring 3

new project: sandsifter x86 processor fuzzer; exposes hidden instructions in x86; github.com/xoreaxeaxeax/s…

sandsifter results: secret instructions; bugs in IDA, gdb, VS, valgrind, capstone, qemu; flaws in hypervisors; critical hardware locks; etc.

VIDEO: “Breaking the x86 Instruction Set” by domas #BHUSA 2017 Briefing presentation ow.ly/JLFR30eNDdt

So is branchless computation hardened against #spectre and #meltdown? Here's a secure, branchless DOOM ... 7 hours in, 1 frame rendered. github.com/xoreaxeaxeax/m…