A small note from me

A single static Go binary that decrypts and unpacks FortiOS firmware end to end, plus the FortiOS 7.4 config-secret key nobody had published before this.

How I registered a Linux machine with Apple's private services, received an existing Find My People key over IDS, and decrypted the live location without a Mac.

tl;dr I built an agentic mobile security research system that runs the whole mobile bug bounty pipeline, from scoping a program to writing the report. Here is what happened when I pointed it at real programs.

How one Commit Broke Obfuscation: A blog post exploring the role of compilers and optimizations in the field of obfuscation and de-obfuscation.

A journey into the USR-G806AU 4G LTE industrial router. From fake root accounts to real and undocumented root accounts, and the discovery of hardcoded credentials that expose devices to remote compromise.

This article demonstrates devirtualization of CodeVirtualizer/Themida protected code, however the techniques described here apply to pretty much every virtual machine based obfuscator. Only requiring some minor modifications to support each of them.

Written by Hyunseo Shin

Exploiting TP-Link Home Security Smart Cameras

Elastic Security Labs explores the ongoing arms race between LLM-driven reverse engineering and obfuscation.

Background

Malware Analysis Crash Course Jae Young Kim and Nick Harbour FLARE Learning Hub Contents Contents Introduction Prerequisite Knowledge Setting Up Ackknowledgements About the Authors Chapter 1: x86 Basics Assembly and Disassembly Data Types x86 Registers Instruction Basics MOV NOP Hacking Assembly...

How to systematically extract struct field offsets from Apple's stripped XNU kernelcache using static analysis alone.

Author: Dr. Xiang Fu Roadmap: You need to first follow Tutorials 1 to 4 to set up the lab configuration. Then each tutorial addresses an ...

Samsung Internet on the Galaxy S25 shipped a six-month-old version of V8, exposing it to publicly known bugs. Learn how we exploited a bytecode interpreter vulnerability to achieve renderer RCE and universal XSS in the browser.

The article demonstrates how to analyze Windows shellcode in Ghidra by identifying API-hashing routines, resolving hidden Windows API calls, and extracting C2 infrastructure without relying on automated emulation tools.

Intercepting OkHttp at Runtime With Frida - A Practical Guide

Reverse engineering firmware binaries often entails going through the datasheet, compiler headers to set up the base address and memory map correctly.

1. 취약점 개요

@Android Internals Review

Unmanned Aerial Vehicle communications are encountering increasingly severe multi-source interference challenges in dynamic adversarial environments, which impose higher demands on their...

Learn how SafeBreach developed malware integrated within Palo Alto Networks Cortex XDR, exploiting its ransomware protection feature.

Desoldering a drone's flash chip and reconstructing the firmware from broken data.

﷽

Discover how to reverse engineer Windows 11 kernel internals, identify undocumented features, and enable hidden telemetry for enhanced EDR visibility.