Blog posts
Coredumps of my thoughts for making debugging a little less painful.
Hacking on the Jiophone - From getting a rootshell to running Doom
A few days ago, I found an old Jiophone. At first, it appeared to be a simple, locked down KaiOS device. But after a day of tinkering around with it, I found myself running doom on it.
Jails, Not Containers: A CTFer’s PWN Environment with Nix and Bwrap
My story of migrating from docker containers to a more hacky bwrap + nix based jail for isolated, low-friction, reproducible security research environments.
Patching ELFs with Assembly C, or abusing the linker for fun and profit
Using a little bit of linkerscript magic and C to patch binaries the toolchain-intended way - instead of manually patching assembly instructions like a madman.
Hacking Rustls: Adding Your Own CA for HTTP/S Proxies
Give rustls a gentle lobotomy and make it cooperate with the HTTP/S your proxy of choice :).
Reversing ARM Firmware
Reversing a raw firmware dump is very different from reversing an ELF executable or a PE image. There are no sections, no symbols, and often no clear format - just raw bytes.
In this post, I’ll walk through the process of reversing a simple ARM Cortex-M3 (ARMv7-M) firmware image using Ghidra, mapping memory regions, identifying initialization routines, and making sense of global variables.