Let’s explore ways to mod a Tapo C200 Rev.5 firmware in order to gain root access to a running device.

A comprehensive guide to advanced memory debugging techniques in C, exploring Valgrind, AddressSanitizer, and other tools for detecting memory errors and optimizing memory usage.

The Splunk Threat Research Team breaks down the NotDoor Outlook-macro backdoor linked to APT28 and shows how to detect these stealthy techniques to strengthen security coverage.

The Nokia Beacon 1 proved to be an interesting journey covering the full spectrum of techniques from hardware debug interfaces to firmware extraction and finally both static and dynamic analysis. I was rewarded with interesting findings including a (now-patched)…

EDR-Redir uses BindLink Filter and Windows Cloud Filter to inject, corrupt, and disable EDRs.

Reverse engineering AMSI internals

Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals

The SpearSpecter campaign linked to Iran’s IRGC / APT42 used social engineering and the TAMECAT backdoor to infiltrate high-value targets. The operation leveraged cloud-based infrastructure…

JAVELIN enables users to deliver MANTIS stage zero shellcode into memory on target devices without triggering AV, EDR, or XDR solutions.

A technical walkthrough of discovery, exploitation, and remediation of CVE-2025–9961

This is an abridged version of https://www.pnfsoftware.com/reversing-wasm.pdf. For additional details, including footnotes, as well as…

Chinese APT TTPs and LOLBAS Operations

Reimplementation of GTA:SA 1.0 US. Contribute to gta-reversed/gta-reversed development by creating an account on GitHub.

A deep dive into the DirtyPipe vulnerability, its analysis, and an exploit development journey.