Hacking by Doing / 29 published articles
The research.
Vulnerability disclosures, malware analysis, and reverse engineering. The technical work, documented.
Showing all 29 writeups
All research articles
-
Vulnerability Research
Rockchip RKNN Model Encryption Is Recoverable Without a Key
Rockchip's RKNN model encryption XORs the model with a rand() keystream seeded by time(). Any encrypted model can be decrypted offline without a key. Rockchip has confirmed the issue.
-
Vulnerability Research
Unauthenticated Remote Command Execution in PX4 Autopilot via MAVLink
An unauthenticated attacker within network range can run arbitrary shell commands on a PX4 drone flight controller through the MAVLink SERIAL_CONTROL handler (CVSS 9.8).
CVE-2026-1579Critical severity
-
Vulnerability Research
Unauthenticated RCE in Livewire Filemanager
An unauthenticated attacker can upload a PHP web shell to the Livewire Filemanager package for Laravel and execute it, achieving remote code execution (CVSS 9.8).
CVE-2025-14894
-
Vulnerability Research
TOTOLINK X5000R (AX1800 router) Authentication Bypass
An authentication bypass in the TOTOLINK X5000R (AX1800) router gives anyone on the local network full admin access without valid credentials.
CVE-2025-13184
-
Vulnerability Research
Windscribe VPN Local Privilege Escalation
On Linux, a local user in the windscribe group can abuse the Windscribe VPN root helper over its Unix socket to escalate to root.
CVE-2025-65199Medium severity
-
Vulnerability Research
Stack Buffer Overflow in Duc via Integer Underflow
An integer underflow in Duc, a disk-usage tool in the Debian repositories, triggers a stack buffer overflow that causes denial of service and possible information disclosure.
CVE-2025-13654High severity
-
Vulnerability Research
Heap Out-of-Bounds Read in Hermes JavaScript Engine: A Technical Deep Dive
A heap out-of-bounds read in the SerializedLiteralParser of Meta's Hermes JavaScript engine, leading to denial of service and memory disclosure.
-
Vulnerability Research
Walkthrough: Pre-auth DoS in IBM Verify FreeRADIUS reference module (unchecked realloc)
An unchecked realloc in IBM Verify's FreeRADIUS reference module lets a remote, unauthenticated attacker crash the service (pre-auth denial of service).
-
Malware Analysis
Malware Analysis: Android Malware Disguised as GB WhatsApp
An analysis of an Android APK from the Joker malware family that hides inside the GB WhatsApp mod to mask its malicious behavior.
-
Malware Analysis
Redline Stealer: A Technical Examination of Modern Malware Tactics
A static and dynamic analysis of a Redline Stealer sample, showing how modern info-stealers harvest credentials, cookies, and system data.
-
Reverse Engineering
Malware Development - Creating a Covert Spyware (Loader & Main Payload) in C
A walkthrough of building a covert spyware loader and main payload in C for red teaming, evolving a simple PoC into a stealthy dropper.
-
Malware Analysis
Comprehensive Malware Analysis: Dissecting Agent Tesla’s Evasion Tactics, Persistence, and Network Behavior
A deep analysis of an Agent Tesla sample, examining its evasion tactics, persistence mechanisms, and network exfiltration behavior.
-
Malware Analysis
Shamoon - An Advanced Static and Dynamic Analysis of Iran’s Wiper Malware
A static and dynamic analysis of Shamoon, a destructive wiper malware tied to Iranian state-sponsored groups, and how it erases data.
-
Malware Analysis
Micropsia: In-Depth Analysis of a Hamas-Linked Cyber Warfare RAT
An in-depth analysis of Micropsia, a RAT linked to the AridViper group, covering its surveillance features and command infrastructure.
-
Malware Analysis
Karkoff: Static & Dynamic Analysis of an Iranian Trojan
Static and dynamic analysis of Karkoff, a stealthy Iranian trojan, detailing its persistence and command-and-control behavior.
-
Reverse Engineering
Reverse Engineering and Cracking a Software Registration System
Reverse engineering a CrackMe binary to bypass its registration check and understand how the licensing logic works.
-
CTF & Walkthroughs
Game Hacking Walkthrough: CubeMadness1 room on Hack The Box
A game hacking walkthrough of the CubeMadness1 room on Hack The Box, manipulating game memory to beat the challenge.
-
Malware Analysis
Static & Dynamic Analysis on An Unknown Sample
Static and dynamic analysis of an unknown sample (the SickoMode challenge from PMAT Labs), confirming and dissecting its trojan behavior.
-
Malware Analysis
Malicious Excel Document - Basic Static Analysis
A static analysis of a malicious Excel document on REMnux, extracting its embedded payload and indicators of compromise.
-
Malware Analysis
Advanced Static Analysis - Reverse Shell
A deep static analysis of a reverse shell malware sample, breaking down its structure and capabilities without running it.
-
Malware Analysis
Basic Static & Dynamic Analysis - SillyPutty
A basic static and dynamic analysis of a trojanized PuTTY (SillyPutty) sample to uncover its hidden malicious payload.
-
Malware Analysis
Analyzing A Reverse Shell
Analysis of a reverse-shell RAT sample, tracing how it calls back to its operator and what it can do on an infected host.
-
Malware Analysis
Dynamic Analysis - An Unknown RAT
A dynamic analysis of an unknown RAT, observing its runtime behavior, persistence, and network activity in a sandbox.
-
CTF & Walkthroughs
Hack The Box - Tactics
A walkthrough of the Hack The Box 'Tactics' machine, from initial foothold to the final flag.
-
CTF & Walkthroughs
Hack The Box - Bike
A full walkthrough of the Hack The Box 'Bike' challenge, solving each task step by step.
-
CTF & Walkthroughs
Hack The Box - Ignition
A walkthrough of the Hack The Box 'Ignition' challenge, covering enumeration through to the solution.
-
CTF & Walkthroughs
TryHackMe - MAL: REMnux - The Redux
A walkthrough of the TryHackMe MAL: REMnux room, exploring the REMnux toolkit for reverse engineering malware.
-
CTF & Walkthroughs
TryHackMe - MAL: Strings
A walkthrough of the TryHackMe MAL: Strings room, using string analysis to triage and understand malware samples.
-
CTF & Walkthroughs
TryHackMe - MAL: Malware Introductory Room
A walkthrough of the TryHackMe MAL: Malware Introductory room, covering the fundamentals of malware analysis.
No matching writeups.
Try a different term or browse the full archive.