What I do.
I'm Dolev Aviv, a Lead Security Researcher focused on embedded systems, hardware, and RF security. My work centers on reverse engineering and vulnerability discovery, and a large part of it has been building research capability from the ground up.
Hacking by Doing is my personal research website and the name I use for my technical writing. It brings together my vulnerability disclosures, malware analyses, and practical security walkthroughs. The articles on this site are written by me.
How I got here.
I have been taking computers apart from a young age, dismantling machines and rebuilding them just to understand how they worked. My first encounter with hacking came through games, searching out the cheats and exploits hidden in the ones I played.
The turning point came when I found crypto-jacking malware running on my own machine. I wanted to know exactly how it got in, how it stayed hidden, and how it worked. Reverse engineering that sample is what drew me into security, and the same curiosity has carried me from a kid taking machines apart to leading vulnerability research today.
Research & disclosures.
The technical work behind my 5 published CVEs, alongside the public records.
- CVE-2026-1579 Unauthenticated Remote Command Execution in PX4 Autopilot via MAVLink Public CVE record
- CVE-2025-14894 Unauthenticated RCE in Livewire Filemanager Public CVE record
- CVE-2025-13184 TOTOLINK X5000R (AX1800 router) Authentication Bypass Public CVE record
- CVE-2025-65199 Windscribe VPN Local Privilege Escalation Public CVE record
- CVE-2025-13654 Stack Buffer Overflow in Duc via Integer Underflow Public CVE record
Elsewhere in print.
I wrote Malware Development: Creating A Spyware From Scratch for Digital Whisper, issue #175.