HACKINGBY DOING. Security research by Dolev Aviv

Dolev AvivSecurity research

HACKING
BY DOING.

I take things apart to understand them.
Then I write about what I find.

Explore the research Meet Dolev Aviv
Hacking by Doing's original robot mascot exploring a cartoon electronics lab

A closer look

Selected research.

View all 29 articles

From the archive

Recent
findings.

Full technical writeups, from the first observation to the final proof of concept.

Browse the archive

  1. Vulnerability Research

    Rockchip RKNN Model Encryption Is Recoverable Without a Key

    Rockchip's RKNN model encryption XORs the model with a rand() keystream seeded by time(). Any encrypted model can be decrypted offline without a key. Rockchip has confirmed the issue.

  2. Vulnerability Research

    Unauthenticated Remote Command Execution in PX4 Autopilot via MAVLink

    An unauthenticated attacker within network range can run arbitrary shell commands on a PX4 drone flight controller through the MAVLink SERIAL_CONTROL handler (CVSS 9.8).

    CVE-2026-1579Critical severity

  3. Vulnerability Research

    Unauthenticated RCE in Livewire Filemanager

    An unauthenticated attacker can upload a PHP web shell to the Livewire Filemanager package for Laravel and execute it, achieving remote code execution (CVSS 9.8).

    CVE-2025-14894

  4. Vulnerability Research

    TOTOLINK X5000R (AX1800 router) Authentication Bypass

    An authentication bypass in the TOTOLINK X5000R (AX1800) router gives anyone on the local network full admin access without valid credentials.

    CVE-2025-13184

  5. Vulnerability Research

    Windscribe VPN Local Privilege Escalation

    On Linux, a local user in the windscribe group can abuse the Windscribe VPN root helper over its Unix socket to escalate to root.

    CVE-2025-65199Medium severity

The person behind the research

Dolev Aviv / Hacking By Doing

Hi, I'm Dolev.

I'm Dolev Aviv, the security researcher behind Hacking by Doing. My work focuses on embedded systems, hardware, and RF security. This is where I publish my vulnerability research, reverse engineering, and malware analysis.

More about me

29 writeups / 5 CVE disclosures