Curated Unity IL2CPP, IL2CPP decompilation updates for developers and security researchers. 24 relevant releases and technical developments with original sou… This page links to original publishers, uses short excerpts, and does not reproduce complete articles.
self-contained il2cpp to windows pdb generator (rust, x64, metadata v39) GitHub discovery signal: 36 stars, 0 forks, 0 open issues; language C++; last pushed 2026-07-15. Topics: cpp, ida, il2cpp, il2cppdumper, pdb, pdb-generator, reverse-engineering, rust, unity, windows.
Why it matters: Relevant to Unity IL2CPP, IL2CPP decompilation.
Read the original source →Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases GitHub discovery signal: 163 stars, 22 forks, 0 open issues; language Python; last pushed 2026-07-24. Topics: android, apk, boringssl, bypass, flutter, flutter-ssl-pinning-bypass, frida, ios, ipa, latest-reflutter.
Why it matters: Relevant to APK and IPA analysis, Dynamic instrumentation.
Read the original source →Local-first browser AI video editor with ONNX voiceovers, Whisper captions, talking avatars, and multi-track MP4/WebM export. GitHub discovery signal: 260 stars, 19 forks, 4 open issues; language JavaScript; last pushed 2026-07-24. Topics: agent-skills, ai-video-editor, ai-voiceover, automatic-captions, browser-ai, ffmpeg, ffmpeg-wasm, joyvasa, liveportrait…
Why it matters: Relevant to WebAssembly tooling, WebAssembly runtime.
Read the original source →SSL Pinning Bypass for Instagram iOS (IPA) — Intercept and analyze HTTPS traffic on iPhone & iPad using Burp Suite, mitmproxy, Reqable, or Proxypin. TrollStore & Sideloadly compatible. GitHub discovery signal: 3 stars, 0 forks, 0 open issues; language Unknown; last pushed 2026-06-30. Topics: frida, https-interception, instagram, instagram-ios, instagram-ios…
Why it matters: Relevant to APK and IPA analysis, iOS reverse engineering, Dynamic instrumentation.
Read the original source →What's Changed Canonicalize NaNs from nearbyint by @stevenfontanella in #8561 feat: Update jsoo build process for libbinaryen by @spotandjake in #8565 Handle ref before expected in Heap2Local for StructCmpxchg by @tlively in #8566 GUFA: Ignore unreachable packed reads by @kripken in #8564 Group locals by written type in binary writer by @tlively in #8568 Mo…
Why it matters: Relevant to Unity WebGL reverse engineering, WebAssembly tooling.
Read the original source →Glass - a fast and free IDA Pro alternative GitHub discovery signal: 188 stars, 11 forks, 0 open issues; language Rust; last pushed 2026-06-15.
Why it matters: Relevant to APK and IPA analysis, iOS reverse engineering.
Read the original source →47.0.0 Released 2026-07-20. Added Wasmtime now has the WebAssembly GC proposal enabled by default. #13594 Wasmtime now has the WebAssembly exception-handling proposal enabled by default. #13603 Cranelift now supports the compact unwind format on Mach-O platforms. #13586 Wasmtime now supports bounds-checked unsafe intrinsics which take spectre mitigations in…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →0.17.0 (2026-05-18) Breaking changes: [AOT]: WasmEdge no longer runs a compiled WASM by default for safety reasons. The default execution mode will be interpreter, even the given program is a compiled WASM file. Please ensure you add --run-mode=aot to enable AOT mode when running a compiled AOT WASM. Features: [Version]: Bump the version of the WasmEdge sha…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →0.17.1 (2026-07-03) Features: [CAPI] feat(api): version C ABI symbols for the 0.16 -> 0.17 limit change ( #4951 ) Fixed issues: [Validator] fix: reject non-funcref tables/refs in call_indirect and call_ref ( #4920 ) [WASI] fix(wasi): reject symlink targets that resolve outside the preopen root ( #4938 ) [WASI-Logging] fix(plugin/wasi-logging): keep the defa…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →Breaking Changes New Features Bug Fixes CVE-2026-54914. Fix a potential heap Buffer Overflow in WASI poll_oneoff. CVE-2026-54913. Fix a potential partial uninitialized memory read in load_init_expr. CVE-2026-54912. Fix a potential heap buffer overflow in fast interpreter. Enhancements Others
Why it matters: Relevant to WebAssembly runtime.
Read the original source →What's Changed The ability to redirect JS compiler stderr using EMCC_STDERR_FILE was removed. These days you can use EMCC_DEBUG and/or EMCC_DEBUG_SAVE to preserve all the intermediate JS compiler files. ( #27101 ) The installed versions of the compiler-rt library now follow the upstream naming convetion of libclang_rt. .a . ( #27089 ) Dynamic linking now ex…
Why it matters: Relevant to Unity WebGL reverse engineering, WebAssembly tooling.
Read the original source →GP-1 Additional ChangeHistory revision for 12.1.1 release
Why it matters: Relevant to Binary reverse engineering.
Read the original source →What's Changed Reject out-of-range NaN payloads and bare type-index value types by @vouillon in #2563 Implement upstream spec changes for component text syntax by @alexcrichton in #2562 wasmparser: require result equivalence for (on $t switch) handler by @vouillon in #2564 Prevent unbounded recursion when parsing WITs by @alexcrichton in #2565 Add a parse r…
Why it matters: Relevant to WebAssembly tooling, Decompiler research.
Read the original source →What's Changed Limit the element count of fixed-length lists by @eyupcanakman in #2537 wasmparser: Rename BinaryReaderError to Error by @lann in #2546 fix: signature lowering for strings and lists on modules with 64bit memory by @christoph-dfinity in #2544 json-from-wast: name emitted files after the output stem by @eyupcanakman in #2542 Refactor KebabStr t…
Why it matters: Relevant to WebAssembly tooling, Decompiler research.
Read the original source →Release Notes Codename: "Exploit Twist" Version: 6.1.8 Previous: 6.1.6 AbiDiff: 107-110 (3) Commits: 236 Contributors: 18 curl -Ls https://github.com/radareorg/radare2/releases/download/6.1.8/radare2-6.1.8.tar.xz | tar xJv radare2-6.1.8/sys/install.sh Highlights More details Authors Abhi Evgeny Kolmakov Jon Palmisciano Kevin Stubbings Lazar Aleksic Luisss00…
Why it matters: Relevant to Binary reverse engineering, Native binary tooling.
Read the original source →In this release we continued the long-running migration toward the unified RzArch plugin model: the legacy RzAsm struct was dropped from the public API (a compatibility layer remains for the in-progress parts), and ESIL was moved into its own isolated namespace. ESIL remains deprecated and is scheduled for removal, while RzIL continues to grow as its replac…
Why it matters: Relevant to Binary reverse engineering, Native binary tooling.
Read the original source →v4.5.1 Changelog Features or Enhancements Added Jailbroken iOS Device support in MobSF, Tested in iPhone 6s and 8 with Checkra1n and Palera1n jailbreaks [Early Beta]. See docs: https://mobsf.github.io/docs/#/dynamic_analyzer_docker?id=jailbroken-ios-device-beta Added a new android rule to flag Webview mixed content Bug Fixes Macho Debug Symbol False positiv…
Why it matters: Relevant to APK and IPA analysis, Malware analysis tooling.
Read the original source →Uhmmm, how do I even make a release in 2026? I guess I'll just use AI. [20 minutes of fighting with AI later] I guess doing it manually will work too :D Speaking of AI... There will not be an official dnSpy AI integration, or an MCP server, or whatever else. Stop asking! Find an extension, make one yourself, or just vibecode it, and if it doesn't work, don'…
Why it matters: Relevant to C# decompilation, Binary reverse engineering.
Read the original source →https://lief.re/doc/stable/changelog.html#july-12th-2026
Why it matters: Relevant to APK and IPA analysis, Native binary tooling.
Read the original source →reFlutter Android engine build (v3). Snapshot hash: ace654289f5abc240509fc941453ebc5
Why it matters: Relevant to APK and IPA analysis, Android reverse engineering, iOS reverse engineering.
Read the original source →reFlutter iOS engine build (v3). Snapshot hash: ace654289f5abc240509fc941453ebc5
Why it matters: Relevant to APK and IPA analysis, Android reverse engineering, iOS reverse engineering.
Read the original source →API changes and additions Enum names of the Alpha architecture are now correctly all upper case. Because of an old Auto-Sync bug all the enum names were prefixed with Alpha instead of ALPHA and some contained lower case letters. Sadly, I just recently recognized that Alpha was effected by that bug. While this change is very annoying for everybody using the…
Why it matters: Relevant to Binary reverse engineering, Native binary tooling.
Read the original source →jsr is a call instruction in csky architecture. Disassembler view shows r6 refers to right position. But decompiler view messed up . so how to produce strstr() in decompiler view instead of some pointer calculation? The address of libc::strstr() is calculated by: r28 = GOT start address, calculated by pc+offset r3 = strstr offset in GOT. r6 = [r3 + r28] And…
Why it matters: Relevant to Binary reverse engineering.
Read the original source →Large language models (LLMs) are increasingly applied to reverse-engineering tasks, and recent threat-intelligence reporting shows them operating inside live offensive-security workflows. Claims about their capability, however, outpace our ability to measure it. Existing benchmarks for LLM-assisted binary analysis treat the construction of function-level gr…
Why it matters: Relevant to Binary reverse engineering, Malware analysis tooling.
Read the original source →