Malware analysis, reverse engineering, and software security: behavior analysis, API monitoring, PE/ELF inspection, binary unpacking, static and dynamic analysis with IDA Pro and Ghidra, binary analysis, and code flow mapping.
BOZO
Malware Analysis · Reverse Engineering · Software Security
BOZO
·
[overview]
·
IDA Pro · Ghidra
·
PE / ELF
bozo.info
NameBOZO
Malware AnalysisBehavior analysis, API monitoring, PE/ELF inspection, binary unpacking
Reverse EngineeringStatic & dynamic analysis, IDA Pro, Ghidra, binary analysis, code flow mapping
FocusSoftware Security
LanguagesC++C#PythonNode.js
Discord
GitHubgithub.com/bozopr00x
Focus
Malware Analysis
PE · ELFBehavior analysis, API monitoring, PE/ELF inspection, and binary unpacking.
Reverse Engineering
Static and dynamic analysis, IDA Pro, Ghidra, binary analysis, and code flow mapping.
Software Security
Software security across Malware Analysis and Reverse Engineering.
Projects
Most of my work and tooling stays in private repositories. The entries below are small standalone projects shared on GitHub.
Onyx-PackerPython-to-Native Binary Compiler & Crypter
GitHub →Converts .py scripts into standalone Windows executables (.exe / .pyd) using Cython compilation, 32-byte per-build XOR encryption, a native C++ loader with compile-time MetaString obfuscation, anti-debugging checks, and a RunPE process-hollowing crypter stage.
Pipeline: Python (.py) -> Cython (.pyx / .pyd) -> Static C++ Loader + Anti-Debug + MetaString -> RunPE Crypter (.exe)
NetProtector.NET Assembly Protector & Virtualization Runtime
GitHub →Protects and obfuscates .NET assemblies through a custom C# protection pass paired with a native C++ virtual machine runtime (VMRuntime), applying bytecode encryption, runtime embedding, and anti-debugging checks.
Pipeline: .NET Assembly -> Bytecode Encryption + Obfuscation -> Embedded C++ VMRuntime -> Protected Assembly
