Low-level adventures

Now that we're past the sensational headline, let's be real.

This will be mostly rambling disguised as a technical walkthrough.

The README era For over five years I kept a Github repo that was, charitably described, a README.

During one of the recent working days, I was tasked with fuzzing some Go applications.

The recent appearance of CVE-2022-0847 aka DirtyPipe made the topic of this second part of this series a no-brainer: The vulnerability is not an artificially constructed one like before (read: it has impact), it was delivered with a very detailed PoC (tha…

Disclaimer: This post will cover basic steps to accomplish a privilege escalation based on a vulnerable driver.

This post will aim at giving a general overview of publicly found GLIBC heap exploitation techniques.

Disclaimer: These are unfiltered study notes mostly for myself.

Last time we left off with a pretty decent understanding about how our router is structured and what components were used.

This is a write-up for solving the devils-swapper RE challenge.‌‌

It has been a while since I did some hardware hacking, and this time I want to review the basics.

Welcome back to part 2.2 of this series!

Welcome back to part 2 of this series!

Recently, we came across some firmware samples from D-Link routers that we were unable to unpack properly.

Note: This is a re-upload of an old write-up.