Avery Artemis Pitt-Warddhana (nullableVoidPtr)
Avery is a Senior Offensive Security Consultant by profession and a Security Researcher by hobby, who is a frequent CTF player with Emu Exploit and Friendly Maltese Citizens with a penchant for reverse-engineering. They have previously developed and released open-source security tooling towards program analysis and malware research, and in particular analysed and wrote tooling for JavaScript obfuscators.
Session
React Native mobile applications bundle JavaScript application logic in compiled Hermes bytecode form, with a notable lack of open-source decompilers. In this talk, the decompiler and analysis tool Ares is demonstrated, whilst also outlining for a general technical audience the general VM analysis and decompilation techniques applied from prior research, how they are applied in implementing this tool, along with quirks specific to the Hermes Engine and a discussion on performance improvements.