Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
Self-Study in The Age of LLMs
As part of my doctorate program, I am regularly reading academic papers, watching presentations, and attempting to recreate prior research.
-
Kexec & Btrfs Subvolumes for Kernel Testing
About The Project As a part of my Doctorate, I am re-creating prior work from academic publications in the fuzzing domain.
-
Dealing with Bad Blocks on Nand Flash
About The Project As a part of my Doctorate, I am regularly building, flashing and debugging custom U-Boot bootloaders.
-
Kernel of Doom - A Tiny Linux Kernel to Boot into Doom
About The Project I love Doom.
-
Chatting with Chippies: Modifying TP-Link AX 1800 Firmware
About The Project Arch Cloud Labs projects in the past have tinkered in malware analysis and reverse engineering, but a goal of mine for 2025 was to get a deeper understanding of hardware.
-
Understanding How Valgrind Monitors U-Boot Memory Allocations
About the Project As part of my doctorate program, I’ve been analyzing how Valgrind keeps track of memory allocations in Das U-Boot (aka U-Boot).
-
No Updates, Please: Preserving WINE Compatibility with DNS Sinkholing
About The Project The reMarkable Paper Pro is a premium e-reading and note-taking device that allows you to read, take notes, and not much of anything else.
-
The Packets Are Inside The Computer - Building 802.11 Challenges in Congested 802.11 Environments
About The Project This past weekend was the final Shmoocon and the final Hack Fortress….for now.
-
2025 Is The Year of the Rolling Release Linux Desktop
About The Project Just like every year before, 2025 is the year of the Linux desktop.
-
Parallelize Pacman Downloads & Compilation
Parallelizing Pacman Downloads This goal of this blog post is to make you aware of package manager modifications to speed up package downloads, and parallelize compilation efforts.
-
Building A Router Pt-2: Building OpenWrt in a Container
About The Project Following up from the most recent Arch Cloud Labs blog post on researching and choosing hardware for OpenWrt, this blog post will quickly cover how to build an OpenWrt image for a physical device.
-
Building A Router Pt-1: Researching The Platforms
About The Project Here at Arch Cloud Labs, we love Arch Linux due to the ability to customize, debug, and otherwise modify every aspect of the system.
-
Running Arch Cloud Labs On $1
About The Project The best blogging platforms are frictionless, and give the author control on how to create and share content.
-
5 Years of InfoSec Focused Homelabbing
About the Project Five years ago, on September 22 2019, I published my first blog post titled “New Homelab”.
-
Deploying Hack Fortress at DEF CON 32
About The Project Hack Fortress (HF) is a combination of a first person shooter (Team Fortress 2), and a jeopardy style CTF.
-
Reverse Engineering Unknown Binary Files - Dwarf Fortress Save Files
About The Project The video game hacking community is often a source of inspiration for those in the information security field.
-
PollyPDF: Generating Audiobooks from Academic Abstracts
About The Project Trying to stay up to date with the latest security research is challenging.
-
Badge Hacking - DEFCON - Embedded Systems Village Badge 2023
This past year at DEF CON, the Embedded Systems Village (ESV) sold a custom badge that at the time, I thought was a CTF challenge.
-
HackFortressOS - Adventures with Buildroot
About The Project Arch Cloud Labs’ last three blog posts were diving into different aspects of IoT/embedded vulnerabilities.
-
Hardware Hacking - Dumping Flash Memory of a TrendNet-731BRv1 Router
About The Project Continuing on Arch Cloud Labs’ hardware and router reverse engineering journey, I wanted to dump the firmware of my TrendNet-731BRv1 via reading flash memory from the PCB vs downloading the firmware from TrendNet’s website.
-
Hardware Hacking - Root UART Shells on GL-AR750
About The Project Continuing from Arch Cloud Labs TrendNet 731BR router hacking blog post tearing apart firmware, we’ll now start poking at router hardware!
-
Old CVEs Leading to New Vulns - Reverse Engineering TrendNet-731BRv1
About The Project I recently bought an discontinued TrendNet Router to become more proficient at reverse engineering embedded systems.
-
Abusing gdb Features for Data Ingress & Egress
About The Project Modern Software Development environments have significant debugging capabilities to troubleshoot issues with the complex nature of modern software .
-
Analyzing & Patching a DLL Reverse Shell
About The Project On September 18th, The twitter account Malware Hunter Team Tweeted about a DLL, batch script, and PowerShell script being publicly hosted at 103[.]68[.]109[.]31.
-
Pwntools 103 - Automating Binary Interaction
About The Project In continuation of Arch Cloud Labs’ previous blog post on Pwntools, we dive deeper into the Pwntools framework, focusing on automating interactions with binary programs.
-
Pwntools 102 - Crafting Shellcode with Shellcraft
About The Project Following up from Arch Cloud Labs’ previous blog post on Pwntools, we’ll continue to explore the pwntools framework this time focusing on shellcode generation.
-
Pwntools 101 - Pwndbg & Buffer Overflows
About The Project Pwndbg and Pwntools are Python frameworks for automating different parts of exploit development.
-
Debugging with gdb - Fixing a NULL Pointer Dereference in dhcpcd
About the Project Several tutorials exist on how to leverage the GNU Debugger (GDB) to debug misbehaving applications.
-
Circumventing inotify Watchdogs
About The Project Recently I’ve been building rudimentary file monitoring tools to get better at Golang, and build faux-watchdog programs for research at Arch Cloud Labs.
-
Responding to a LogMeIn Phishing Scam
About The Project Recently a close friend fell victim to a scam that resulted in giving access to their laptop to a scammer via LogMeIn.
-
Analyzing CVE-2022-4883 (PATH Hijacking in libxpm)
About The Project CVE-2022-4883 outlines a Linux PATH hijacking vulnerability in the libxpm package.
-
Disabling ClamAV as an Unprivileged User
About The Project ClamAV is an Open Source antivirus engine that is widely used on mail servers to scan incoming messages.
-
Analyzing Shellcode with GPT
About The Project GPT3 has caught the InfoSec world by storm, and there’s a million tweets, posts, articles, etc… with interesting use cases.
-
Analyzing CVE-2022-46330 (DLL Hijacking in Squirrel.Windows)
About The Project In December of 2022, a DLL Hijacking vulnerability with a CVSS score of 7.8 was reported in the Squirrel.Windows auto-install/update utility.
-
Abstractions & The Art of Debugging
Know Your Tools, and Fear No Bug One of my favorite series of blog posts of all time is “Unix as an IDE”.
-
Analyzing CVE-2022-23093 (FreeBSD Ping Buffer Overflow)
About The Project In November of 2022 the FreeBSD project announced CVE-2022-23093, a buffer overflow vulnerability in the ping utility.
-
Detecting off The Land - Hash Lookups from Native Tooling
About The Project Several Red Team projects exists to “live off the land” and avoid introducing additional executables into an environment.
-
Analysis of a LoadLibraryA Stack String Obfuscation Technique with Radare2 & x86dbg
About the Project Today, we’re going to analyze a malicious binary recently identified by Arch Cloud Labs malware collection system “Archie”.
-
Cryptojacking Campaign Adopts Platypus for C2
About The Project Last week I looked at a Cryptojacking campaign that leveraged a curl trick in the bash dropper to resolve IPv4 addresses from large integers values.
-
Bash Dropper Tricks with Curl
About The Project Today we’re going to look at a couple neat curl tricks I found in a recent bash dropper I was analyzing that resulted in surprisingly low VirusTotal detentions!
-
Detection Engineering with FLAWS & Falco
About The Project I’m currently studying for my Certified Kubernetes Security Specialist (CKS) certification.
-
Bulk Analysis of Cobalt Strike's Beacon Configurations
About The Project Security researcher Silas Cutler recently tweeted a link to a unique data set of Cobalt Strike Beacon payloads, and their extracted configurations (thanks Silas!).
-
Working Towards SLSA-1 for AUR Builds
About The Project Recently I’ve started supporting a package in the Arch User Repository (AUR) in order to contribute to the Arch Linux project.
-
Scaling Dumb Fuzzing with Kubernetes
About The Project The e-zine tmp.out focuses on ELF/Linux related research in a style of Phrack.
-
Exploring Binary Loaders
About The Project Lately I’ve been playing around more with binary exploitation CTF challenges.
-
Discord Notifications for AWS Billing
About the Project Lately, I’ve seen some horror stories (1, 2) about side projects gone awry resulting in HUGE cloud bills.
-
Shellcode Generation with The Radare2 Framework
About The Project With IDA Pro’s recent announcement of going to a subscription model it has some revisiting the current state of available decompilers.
-
Diving Into Kubernetes: Preparing for the CKA
Preparing for The CKA & Diving into the Kubes I recently passed the Linux Foundation’s Certified Kubernetes Administrator (CKA) certification and thought I’d throw some notes together on how I prepared.
-
Two Years Blogging - A Review of Designing Homelab Projects
The Art of The Homelab I’ve been homelabbing/blogging about side projects for about two years now and thought I’d compile a list of things that have been useful to me in my homelabbing journey.
-
Threat Intelligence in the Homelab
About The Project Threat Intelligence comes in many forms and services that help enable the analyst, incident responder, reverse engineer, etc… to be aware of ongoing threats against enterprise environments.