REMY HAX

Imagine that you wanted to build your own VPN protocol from the ground up.

Smolbox runs entirely in a browser tab.

Transport Layer Security (TLS) is the protocol involved in getting the lock icon to appear in your browser next to the URL.

Cyber, AI, Disruption!

Every few months there’s some sensational news reporting that some high profile individual doesn’t use bluetooth wireless headphones and everyone goes “Wait, what?”.

My LILYGO T-Watch S3 Plus (with GPS) arrived with a non-functional LCD.

Number 3 may surprise you!

There’s a new Erlang OTP vulnerability, CVE-2025-4748.

Ghidra is the best Android app RE tool.

Using an AI powered network traffic analysis tool we built called SIFT, GreyNoise has caught multiple anomalous network payloads with zero-effort that are attempting to disable TrendMicro security features in ASUS routers, then exploit vulnerabilities and…

VPN: phone, not desktop.

Or “everything actually is a nail, you just need a bigger hammer” Graph Theory is a really neat subject matter relating to the modeling of pairwise relations between objects.

This article is a long time coming. z3, the constraint solver, is commonly used in crackmes and CTF challenges.

Remy shares his experience building custom hardware for a scalable Bluetooth Low Energy (BLE) survey, discussing problems encountered, and providing a replicable solution that the audience can implement for approximately $100 (no soldering required).

Recently, products like Claude Code, Cursor, and Copilot have sprung to the forefront of my social media.

Plagiarism is an ethical violation.

Recently I ran into a headache of Out-Of-Memory errors when using Binary Ninja.

The popular social media app “TikTok” is likely facing an iminent ban in the United States in the coming days.

I’m sorry, but I can’t help with that.

Recently I needed to get the data off of a LUKS encrypted partition on a Virtual Machine that “wasn’t mine” and I’d never done it before.

In iOS if you are: Using Apple Maps for directions Playing Music Connected to a car over Bluetooth (not Apple CarPlay) …when you pause your music it will remain paused until the next direction is audibly announced by Apple Maps.

In this blog, the second in the series, you will learn about how to build a database of Bluetooth Low-Energy (BTLE) Generic Attribute (GATT) Universally Unique Identifiers (UUIDs) capable of remotely identifying Bluetooth Low-Energy devices for the purpos…

Recently Sift caught an interesting payload.

The M5Stack CoreMP135 w/ STM32MP135D is a versatile little DevKit recently released by M5Stack at the $75 price range.

For this last years Binary Golf Grand Prix the goal was to: Create the smallest self-replicating file.

On April 18th, 2020 during peak COVID I did my first real foray into Bluetooth Low-Energy (BTLE) privacy and security.

In order to see CVE-2023-50164 in the wild, I expect that in the coming weeks, we will see research into vendor and product specific implementations leveraging Apache Struts2 in order to determine exactly what path must be traversed to in order to drop a…

Do you know all of the default Windows 7 file formats?

At GreyNoise we work with network protocols.

Hello, we’re going to be trying something a little bit different today.

The real motive of this series of blogs may take a few iterations to become clear to the reader, assuming of course I can actually pull it off.

This blog is far overdue and unfortunately isn’t really a “Part 1”.

For this years Binary Golf Grand Prix I started off by learning to fuzz properly, use a debugger properly, and various tooling.

The 3rd Annual Binary Golf Grand Prix (BGGP3) is to find the smallest file which will crash a specific program. https://tmpout.sh/bggp/3/ This blog is stream of consciousness for finding tooling and crashes.

Where we last left off, I had done an initial reverse engineering pass of Windows Update Delivery Optimization see: DOing Harm.

There’s this thing called Windows Delivery Optimization which allows “you to get Windows updates and Microsoft Store apps from sources in addition to Microsoft, like other PCs on your local network, or PCs on the internet that are downloading the same fil…

Where last I left off in Adventures in Bluetooth: Part 1, I was originally attempting to flash custom firmware to a Fitbit Charge 2 smartwatch and ended up taking a quite large side-quest.

Have you ever had an idea you couldn’t quite shake?

I was a Private Internet Access (PIA) customer for many, many years.

Symbian OS, Android, Radio Frequencies, BTSNOOZ, BTSNOOP, and getting kicked in the teeth.

So far I’ve managed to have just enough reverse engineering skills as is useful to me at the time, but recently I’ve taken an interest in getting a bit more in depth.

Recently I stumbled across a thread on Reddit r/AskNetsec Now, without looking at the post: What do you think the answers looked like?

Last week a friend of mine asked me to debug/RE some phishing emails that had been sent to them.

It’s easy to set up an IDS or other infrastructure to drop packets that match rules.

This aims to explain and perform an example of how the Client-Puzzle-Protocol (CPP) may be implemented (almost) entirely in HTTP.

Let’s build the smallest WASM / GBA ROM / 7Zip polyglot in 584 bytes for the Binary Golf Grand Prix 2021.

In early 2017, @ericlaw wrote a blog post titled The Line of Death.

Earlier this month, I came back around to seriously considering an attempt at bitsquatting.

I’ve been doing weekly chaos engineering projects for a while now, so I decided to start a blog.

This is a list of tools that may be useful or silly.