Björn Ruytenberg (@0Xiphorus) header
Björn Ruytenberg (@0Xiphorus) profile picture

Security researcher, focusing on hardware, firmware and OS security | https://xitter.gq/t.co/qdj70wzFaW | PhD candidate @vu5ec | @0Xiphorus@infosec.exchange

The Netherlands
Joined August 2017
Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)Photo by Björn Ruytenberg (@0Xiphorus)
Björn Ruytenberg retweeted
The new version of @HyperDbg (v0.25) is now released! In addition to bug fixes and improvements to the HyperEvade project, this release introduces the ability to debug a Windows machine (guest) from a Linux machine (host). Check it out: github.com/HyperDbg/HyperDbg…
1
22
100
5,100
29ea156cdbdd87d810ea2298d0f01b12ae1a4146cc640758b5c896f5cf2585b8
1
2
18
2,612
Björn Ruytenberg retweeted
Debug beyond conventional limits. Explore Hypervisor-Assisted Reverse Engineering workshop at Hardwear.io N L2026 and uncover low-level Windows behavior through hypervisor-level visibility. Register now: hardwear.io/nl-2026/talks-sp… #HardwearNL2026
7
9
1,089
Björn Ruytenberg retweeted
Links to all videos on YouTube are up at eipsi.win.tue.nl/surveillanc… and we're adding slides as we get them
3
2
324
Björn Ruytenberg retweeted
When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security By Björn Ruytenberg - Malicious PCIe device (via Thunderbolt) gains direct memory access. - Can bypass Windows lock screen. - Can read BitLocker keys from RAM. - Can inject code into kernel memory.
5
25
144
6,854
Björn Ruytenberg retweeted
Registration is open for our next Security in Times of Surveillance event taking place 26 June at @TUe_MCS eipsi.win.tue.nl/surveillanc… Speakers include Martin Albrecht, Chloe Berthelemy, Rikke Bjerg Jensen, Thomas Lohninger, Bjoern Ruytenbert, and Carmela Troncoso
1
5
5
1,222
Björn Ruytenberg retweeted
Major milestone forward for HyperDbg supporting #Linux. We've made a major progress on porting HyperDbg to Linux (still a long road ahead). Now the HyperDbg SDK can be compiled with GCC for both user/kernel modes on Linux. More updates coming soon...👀 github.com/HyperDbg/HyperDbg…
1
8
41
2,876
Slides and recordings for our @FOSDEM talks are up! Join an in-depth introduction into @HyperDbg 's features and internals, or find out what's the latest in anti-anti-debugging techniques and HV transparency for malware reversing: fosdem.org/2026/schedule/eve… fosdem.org/2026/schedule/eve…
1
13
37
3,340
Curious about anti-anti-debugging techniques and hiding hypervisors from malware? Or simply looking for an in-depth introduction to @HyperDbg? Join @Intel80x86 and my @FOSDEM talks tomorrow: fosdem.org/2026/schedule/eve… fosdem.org/2026/schedule/eve…
12
35
2,293
0b6732a0b1f608cfaf48baa926b781dbcb653a9979901788310010719f6f5fd3632d47c09da3446ae461f03e12e421ee e10451e60a858a98a8f3ddb2ec9c414516d404f43299f67d45b0dd9e9c9f14470c13937c13fc2f7d3434758cd88b39fc
2
2,003
We have received reports @HyperDbg's latest release shows unexpected behavior. As it turns out, this is due to a compiler optimization bug in Visual Studio 17.14.8 and 17.14.9. We have pushed a temporary workaround fixing the build. Thanks for reporting! (1/2)
1
2
7
1,705
Apparently this issue is affecting others too. As we can't revert to older GH runner image versions, we will temporarily publish unoptimized release builds until MS pushes a fixed runner image. xitter.gq/rpcs3/status/194606920… github.com/actions/runner/is… (2/2)
Visual Studio 17.14.X compiler versions introduced a compiler optimisation bug, causing severe issues on RPCS3 such as missing game audio. 17.14.9 fixes it - we expect this version to be available on GitHub next week. This is why there have been no builds for the last 4 weeks.
2
417
Björn Ruytenberg retweeted
I'm happy to announce that @HyperDbg v0.14 is released! This version includes HyperEvade (beta preview), fixes Win11 24H2 compatibility issues, and adds multiple timing functions to the script engine (Special thanks to @0Xiphorus). Check it out: github.com/HyperDbg/HyperDbg… (1/3)
1
24
69
12,749
Curious about anti-anti-debugging techniques and hiding hypervisors from malware? Slides are up for ECOOP/DEBT 2025 talk where we present HyperEvade, our upcoming hypervisor transparency extension for @HyperDbg : github.com/HyperDbg/slides/b… (1/2)
1
26
1
88
7,224
HyperEvade is targeted for @HyperDbg 's next major release - so watch this space! (2/2)
2
259
Björn Ruytenberg retweeted
HyperDbg v0.13.1 has been released. 💫 This version includes improved mitigations against anti-hypervisor techniques used to detect nested virtualization environments, along with various bug fixes. Check it out: github.com/HyperDbg/HyperDbg…
2
32
1
115
9,157
Björn Ruytenberg retweeted
HyperDbg v0.13 is out! 🎉 This version comes with a new command '!pcicam' for dumping and interpreting PCIe CAM, new anti-anti-hypervisor methods, improved MMIO scripting, plus lots of bug fixes & improvements. Big thanks to @0Xiphorus & @AbbasMasoumiG. github.com/HyperDbg/HyperDbg…
1
12
40
3,498
Björn Ruytenberg retweeted
The first HyperDbg release of 2025 is out! 🎉 This version (v0.12) introduces commands for PCI/PCI-e device tree enumeration and IDT dumping, plus many bug fixes. Huge thanks to @0Xiphorus, @reodus_, @binophism & other contributors! 🔗 Check it out: github.com/HyperDbg/HyperDbg…
3
35
2
91
10,007
Björn Ruytenberg retweeted
HyperDbg v0.11 is released! ✨ This version comes with bug fixes, improvements, and two new commands for viewing Local APIC (XAPIC/X2APIC) and IO APIC. Big shoutout to @0Xiphorus for joining the team for bringing PCIe support to HyperDbg! github.com/HyperDbg/HyperDbg…
1
14
47
3,269