tag: Tooling

Symless: an IDA assistant for structure reconstruction

13 Jan, 2026 by Baptiste Verstraeten

Symless is an IDA Pro plugin designed to assist with structure reconstruction and cross-reference placement. It comes in two flavors: an automatic pre-analysis that can reconstruct most of the structures used in a binary, and an interactive plugin that reconstructs a single structure from user selection.

We are now releasing a new architecture-agnostic version of Symless, and use this opportunity to describe its internal logic.

LLVM-powered deobfuscation of virtualized binaries

Virtualization is a powerful technique for code obfuscation, and reversing it can be challenging. In this post, we cover the work done during an internship on developing an automated devirtualization tool. We explore a simplified taint-based approach and discuss its limitations. For a more in-depth analysis, the full report is also made available.