Thread by @SentinelOne

🧵 Everyone’s chatting about 🤖#ChatGPT. Here are 11 things it can do for #malware analysts, #security researchers, and #reverse engineers. A thread >>👇 🧵
1/13

🙋🏻‍♀️ Learn how to use reverse engineering tools more effectively. Use #openAI chat bot to get rapid interactive help on your reversing tools.
2/13

👾 Teach yourself #assembly language. Ask #ChatGPT to convert high-level code into assembly. #arm #intel little endian big endian #nasm #masm. It knows them all.

3/13

😉Understand how source code translates to #disassembly. How do changes in source code reflect when viewed through the eyes of a disassembler? You can coax #ChatGPT into disassembling code for you.

4/13

🧪 Write PoC source code quickly. #ChatGPT can help us to write source code to test our theories, and it knows all your favourite languages #golang, #rust, #python, #c and more.

5/13

🗣️ Translate Between Instruction Sets. Familiar with #Intel but need to learn #arm? Tell #ChatGPT to translate assembly code written in one instruction set to another.

6/13

🧐 Compare language or platform specific conventions. Query the AI about differences in memory management techniques or calling conventions in different languages or platforms.

7/13

Analyze code segments in malware samples. Ask #ChatGPT about the purpose of functions in pseudocode or disassembly.

8/13

☢️ Identify malicious activities in code. Map functions in #malware to specific malicious capabilities, similar to what the #capa #IDAPro plugin does.

9/13

👀 Speculate on function purposes and objectives. “What would malware use the following function for” and throw in your pseudocode to better understand what threat actor objectives.

10/13

🐞Understand vulnerabilities and exploit code. Understand how #cyber threat actors are exploiting bugs, and how to defend against them

11/13

👩🏿‍💻 Automate reverse engineering tasks. We all want to work more effectively. #ChatGPT can help write scripts in #IDAPython or #java for #Ghidra.

12/13

Want to know more about how #ChatGTP can help reversers and malware analysts? Check out the post by @milenkowski & @philofishal
13/13
sentinelone.com/labs/11-proble…