Record · corpus.blog/posts/01a0deab-4d56-7103-bb2c-ba9a8b569c26

We hid backdoors in ~40 MB binaries and asked AI + Ghidra to find them

quesma.com · published 10 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at quesma.com Wayback capture

2blogs citing

First cited: 4 Mar 2026
Most recent: 23 Mar 2026
Rank this month: not ranked
Links from this post: 36
Words captured: 3,492

Cited by

Blog

In the post

Date

Hello from Dmytro Zharii | Dmytro Zharii

Links from my inbox 2026-03-23 Read at the source ↗

23 Mar 2026

Homepage - Piotr Migdał

Reviving a 20-year-old puzzle game Chromatron with Ghidra and AI Read at the source ↗

4 Mar 2026

Links from this post

Link

Host

Reverse engineering River Raid with Claude, Ghidra, and MCP Read at the source ↗

quesma.com

https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/

badcyber.com

https://quesma.com/benchmarks/binaryaudit/

quesma.com

https://github.com/quesmaOrg/BinaryAudit

github.com

https://entro.security/blog/shai-hulud-2-0-banks-gov-tech-breach/

entro.security

https://posthog.com/blog/nov-24-shai-hulud-attack-post-mortem

posthog.com

https://notepad-plus-plus.org/news/hijacked-incident-info-update/

notepad-plus-plus.org

https://www.reuters.com/sustainability/climate-energy/ghost-machine-rogue-communication-devices-found-chinese-inverters-2025-05-14/

reuters.com

https://www.theguardian.com/world/2025/nov/05/danish-authorities-in-rush-to-close-security-loophole-in-chinese-electric-buses

theguardian.com

https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains

media.ccc.de

https://media.ccc.de/c/37c3

media.ccc.de

https://news.ycombinator.com/item?id=42538914

news.ycombinator.com

https://arstechnica.com/information-technology/2021/01/hackers-are-exploiting-a-backdoor-built-into-zyxel-devices-are-you-patched/

arstechnica.com

https://en.wikipedia.org/wiki/Objdump

en.wikipedia.org

https://github.com/NationalSecurityAgency/ghidra

github.com

https://rada.re/

rada.re

https://hex-rays.com/ida-pro

hex-rays.com

https://binary.ninja/

binary.ninja

https://www.lighttpd.net/

lighttpd.net

https://dnsmasq.org/

dnsmasq.org

https://github.com/mkj/dropbear

github.com

https://github.com/sozu-proxy/sozu

github.com

https://www.gnu.org/software/binutils/

gnu.org

https://github.com/QuesmaOrg/BinaryAudit/blob/main/tasks/dnsmasq-backdoor-detect-printf/instruction.md

github.com

https://github.com/QuesmaOrg/BinaryAudit/blob/main/tasks/sozu-backdoor-multiple-binaries-detect/instruction.md

github.com

https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-for-intelligence/

daniel.haxx.se

https://en.wikipedia.org/wiki/Base_rate_fallacy

en.wikipedia.org

https://quesma.com/benchmarks/binaryaudit/tasks/ghidra-decompile-pyghidra/

quesma.com

https://github.com/caddyserver/caddy

github.com

https://quesma.com/benchmarks/binaryaudit/models/claude-opus-4.6/

quesma.com

https://quesma.com/benchmarks/binaryaudit/models/gemini-3-pro-preview/

quesma.com

https://quesma.com/benchmarks/binaryaudit/models/claude-opus-4.5/

quesma.com

https://github.com/QuesmaOrg/BinaryAudit

github.com

https://news.ycombinator.com/item?id=47111440

news.ycombinator.com

https://www.linkedin.com/feed/update/urn:li:activity:7427005500229120000/

linkedin.com

https://x.com/pmigdal/status/2021244382800760873

x.com