corpus.blog
56,966 blogs · [ { "id": "01a08734-14b9-72d2-9709-699a377d94d8", "title": "Static Devirtualization of Tencent VM", "url": "https://back.engineering/blog/31/07/2026/", "published_at": "2026-07-31T04:00:00+00:00" }, { "id": "01a08734-14b9-72d2-9709-699a37b5a54b", "title": "Static Devirtualization of Themida", "url": "https://back.engineering/blog/09/05/2026/", "published_at": "2026-05-09T04:00:00+00:00" }, { "id": "01a08734-14b9-72d2-9709-699a381d868f", "title": "Deobfuscation and Analysis of Ring-1.io", "url": "https://back.engineering/blog/04/02/2026/", "published_at": "2026-02-04T05:00:00+00:00" }, { "id": "01a08734-14b9-72d2-9709-699a389848de", "title": "Unauthorized Code Execution in FiveM / GTA V (Pwning the Game Client)", "url": "https://back.engineering/blog/26/09/2022/", "published_at": "2022-09-26T21:32:04+00:00" }, { "id": "01a08734-14ba-7354-b988-01321becc658", "title": "AMD-V Hypervisor Development - A Brief Explanation", "url": "https://back.engineering/blog/04/08/2022/", "published_at": "2022-08-05T02:44:33+00:00" }, { "id": "01a08734-14ba-7354-b988-01321c984345", "title": "Theodosius - Jit linker, Symbol Mapper, and Obfuscator", "url": "https://back.engineering/blog/06/05/2022/", "published_at": "2022-05-07T01:15:47+00:00" }, { "id": "01a08734-14ba-7354-b988-01321cca56a6", "title": "Writing a Mutation Engine and breaking Aimware", "url": "https://back.engineering/blog/13/04/2022/", "published_at": "2022-04-14T02:15:07+00:00" }, { "id": "01a08734-14ba-7354-b988-01321d1a85cf", "title": "EZVIZ BD-2402B1 Reverse Engineering and SNES9X Port", "url": "https://back.engineering/blog/20/01/2022/", "published_at": "2022-01-21T02:54:47+00:00" }, { "id": "01a08734-14ba-7354-b988-01321da7a8e4", "title": "EQU8 - Kernel Component Analysis", "url": "https://back.engineering/blog/12/08/2021/", "published_at": "2021-08-12T09:57:50+00:00" }, { "id": "01a08734-14ba-7354-b988-01321e0d5faa", "title": "EasyAntiCheat Exploit to inject unsigned code into protected processes", "url": "https://back.engineering/blog/10/08/2021/", "published_at": "2021-08-11T02:44:35+00:00" }, { "id": "01a08734-14ba-7354-b988-01321e396e0d", "title": "VMProtect 2 - Part Two, Complete Static Analysis", "url": "https://back.engineering/blog/21/06/2021/", "published_at": "2021-06-21T23:16:05+00:00" }, { "id": "01a08734-14ba-7354-b988-01321e569804", "title": "VMProtect 2 - Detailed Analysis of the Virtual Machine Architecture", "url": "https://back.engineering/blog/17/05/2021/", "published_at": "2021-05-18T04:26:08+00:00" }, { "id": "01a08734-14ba-7354-b988-01321eedfbb9", "title": "Voyager - A Hyper-V Hacking Framework", "url": "https://back.engineering/blog/20/04/2021/", "published_at": "2021-04-20T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-01321f1f2888", "title": "Hyperspace - Hidden Address Spaces", "url": "https://back.engineering/blog/29/03/2021/", "published_at": "2021-03-29T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-01321f63985a", "title": "Reverse Injector - Merging Address Spaces", "url": "https://back.engineering/blog/27/03/2021/", "published_at": "2021-03-27T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-0132203c69e8", "title": "MSREXEC - Elevate Arbitrary WRMSR to Kernel Execution", "url": "https://back.engineering/blog/22/03/2021/", "published_at": "2021-03-22T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-013220c31053", "title": "PTM - Page Table Manipulation From Usermode", "url": "https://back.engineering/blog/01/12/2020/", "published_at": "2020-12-01T05:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-013220e1b761", "title": "VDM - Vulnerable Driver Manipulation", "url": "https://back.engineering/blog/01/11/2020/", "published_at": "2020-11-01T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-013220f9d07b", "title": "PSKP - Process-Context Specific Kernel Patch", "url": "https://back.engineering/blog/25/08/2020/", "published_at": "2020-08-25T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-013221c2217b", "title": "Virtual Memory - Intro to Paging Tables", "url": "https://back.engineering/blog/23/08/2020/", "published_at": "2020-08-23T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-0132227e1710", "title": "Physmeme - Windows Unsigned Kernel Driver Mapper", "url": "https://back.engineering/blog/19/04/2020/", "published_at": "2020-04-19T04:00:00+00:00" }, { "id": "01a08734-14ba-7354-b988-0132231de8aa", "title": "AVX", "url": "https://back.engineering/authors/avx/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-0132235314de", "title": "bright", "url": "https://back.engineering/authors/bright/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-013223b80152", "title": "CompiledCode", "url": "https://back.engineering/authors/compilecode/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-01322421b5b4", "title": "Eggsy", "url": "https://back.engineering/authors/eggsy/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-01322429967e", "title": "federico22598", "url": "https://back.engineering/authors/federico22598/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-013224905afe", "title": "IDontCode", "url": "https://back.engineering/authors/idontcode/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-0132256318e8", "title": "medievalghoul", "url": "https://back.engineering/authors/medievalghoul/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-01322653853e", "title": "naci", "url": "https://back.engineering/authors/naci/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-013226afa50d", "title": "noahware", "url": "https://back.engineering/authors/noahware/", "published_at": null }, { "id": "01a08734-14ba-7354-b988-013226d8c61c", "title": "VollRagm", "url": "https://back.engineering/authors/vollragm/", "published_at": null }, { "id": "01a08734-14bb-72e2-852d-ff0f15261d68", "title": "x86mike", "url": "https://back.engineering/authors/x86mike/", "published_at": null } ] posts Claim your blog
Back to back.engineering
Blog · corpus.blog/blogs/back.engineering/posts

back.engineering

back.engineering

2026

Static Devirtualization of Tencent VMoriginal ↗
31 Jul 2026
Static Devirtualization of Themidaoriginal ↗
9 May 2026
Deobfuscation and Analysis of Ring-1.iooriginal ↗
4 Feb 2026

2022

Unauthorized Code Execution in FiveM / GTA V (Pwning the Game Client)original ↗
26 Sept 2022
AMD-V Hypervisor Development - A Brief Explanationoriginal ↗
5 Aug 2022
Theodosius - Jit linker, Symbol Mapper, and Obfuscatororiginal ↗
7 May 2022
Writing a Mutation Engine and breaking Aimwareoriginal ↗
14 Apr 2022
EZVIZ BD-2402B1 Reverse Engineering and SNES9X Portoriginal ↗
21 Jan 2022

2021

EQU8 - Kernel Component Analysisoriginal ↗
12 Aug 2021
EasyAntiCheat Exploit to inject unsigned code into protected processesoriginal ↗
11 Aug 2021
VMProtect 2 - Part Two, Complete Static Analysisoriginal ↗
21 Jun 2021
VMProtect 2 - Detailed Analysis of the Virtual Machine Architectureoriginal ↗
18 May 2021
Voyager - A Hyper-V Hacking Frameworkoriginal ↗
20 Apr 2021
Hyperspace - Hidden Address Spacesoriginal ↗
29 Mar 2021
Reverse Injector - Merging Address Spacesoriginal ↗
27 Mar 2021
MSREXEC - Elevate Arbitrary WRMSR to Kernel Executionoriginal ↗
22 Mar 2021

2020

PTM - Page Table Manipulation From Usermodeoriginal ↗
1 Dec 2020
VDM - Vulnerable Driver Manipulationoriginal ↗
1 Nov 2020
PSKP - Process-Context Specific Kernel Patchoriginal ↗
25 Aug 2020
Virtual Memory - Intro to Paging Tablesoriginal ↗
23 Aug 2020
Physmeme - Windows Unsigned Kernel Driver Mapperoriginal ↗
19 Apr 2020

Undated

AVXoriginal ↗
—
brightoriginal ↗
—
CompiledCodeoriginal ↗
—
Eggsyoriginal ↗
—
federico22598original ↗
—
IDontCodeoriginal ↗
—
medievalghouloriginal ↗
—
nacioriginal ↗
—
noahwareoriginal ↗
—
VollRagmoriginal ↗
—
x86mikeoriginal ↗
—