Rust Reverse Engineering Training
Modern programming languages require modern reverse engineers.
See upcoming training dates
Upcoming Trainings & Events
Training: Deconstructing Rust Binaries @ Ringzer0 COUNTERMEASURE Fall 2026
Deconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical upskill in your ability to analyze Rust binaries. You will learn how to effectively triage Rust binaries, how to trace data flow through Rust binaries, and how to tackle common techniques found in the Rust malware ecosystem.
This course is aimed at malware reverse engineers, but vulnerability researchers and software reverse engineers who have Rust targets will also find the course valuable. This course is taught and written by an experienced malware reverse engineer, Cindy Xiao, with extensive experience specifically in reversing Rust binaries. Real Rust malware samples will be used in the course for practice.
Binary Ninja will be used in the course as the primary disassembler and decompiler tool. Students will receive a Binary Ninja student license as part of the course ($74 USD value).
Ringzer0 COUNTERMEASURE Fall 2026
Remote
16 hours
Talk: Reverse Engineering Rust Malware in 2026 @ RustConf 2026
In the past several years, professional malware reverse engineers have come to a terrible realization: They need to learn how to reverse Rust programs. The widespread adoption of Rust has not only led to an increase in legitimate software targets to study and examine for vulnerabilities, but also an explosion in malware written in Rust.
This talk is a survey of the reverse engineering landscape for Rust malware in 2026. It walks through the analysis of a Rust malware sample, and discuss the techniques that Rust malware authors are using in their programs. It looks at the limitations of program analysis and decompilation tools, which are still largely built to analyze C programs, against Rust binaries. Finally, it discusses the challenges present in teaching Rust reverse engineering to malware reverse engineers, and the differences in mindset, tool adoption, and educational approach between malware reversers and Rust software developers.
RustConf 2026
Montréal, Canada & Remote
Recent Trainings & Events
Training: Deconstructing Rust Binaries @ Ringzer0 COUNTERMEASURE Spring 2026
Deconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical upskill in your ability to analyze Rust binaries. You will learn how to effectively triage Rust binaries, how to trace data flow through Rust binaries, and how to tackle common techniques found in the Rust malware ecosystem.
Ringzer0 COUNTERMEASURE Spring 2026
Remote
16 hours
4 days, 8am-12pm PDT (UTC-7) each day
Latest News & Blog Posts
Rust Malware Sample Gallery, December 2025 Update
The Rust Malware Sample Gallery just received a major update, with 20 new families added! The Sample Gallery collects links to articles about malware written in Rust, organizes them by malware family, and includes a download link to a publicly available sample for every malware family. This is a resource for any malware analyst who wants to get hands-on with real Rust malware.
Read More
Workshop: Reversing a (not-so-) Simple Rust Loader @ Ringzer0 COUNTERMEASURE
On November 7, 2025, I had the opportunity to present the workshop “Reversing a (not-so-) Simple Rust Loader” at Ringzer0 COUNTERMEASURE, in Ottawa! In this workshop, we examined a simple loader for an information stealer, and used it to cover some key Rust reversing concepts along the way: threads in Rust binaries, dynamic dispatch, and type recovery.
Read More
About Decoder Loop
Malware authors are using modern programming languages like Rust and Go, but reverse engineers are still catching up. The tools and techniques we have were built for a different era.
Decoder Loop is here to raise the bar for binary reverse engineering training.
Our Expertise
Cindy Xiao is an experienced malware analyst, security researcher, and software developer. She has given talks and workshops on malware reverse engineering at leading cybersecurity conferences, including RECon, RE//verse, and NorthSec.