Posts on vulnerability-research
4 posts tagged vulnerability-research.
-
How to Troll Pokémon Players — Gen1recomp Edition
Gen1recompMapping the Gen1recomp network protocol, finding the trust boundary nobody checked, and turning Lua type confusion into a one-packet client crash.
20 min read type-confusionreverse-engineeringvulnerability-research -
CVE-2019-3809: Moodle Blind SSRF Vulnerability Analysis
CVE-2019-3809 MoodleAnalysis of a Blind Server-Side Request Forgery vulnerability in Moodle's badge backpack functionality allowing internal network reconnaissance.
4 min read ssrfweb-securityvulnerability-research -
Escalating TP-Link Firmware Vulnerabilities
CVE-2018-16119 TP-LinkAutomated vulnerability pattern detection across multiple TP-Link firmware versions using Ghidra scripting and Binwalk to discover CVE-2018-16119.
5 min read firmwareiotreverse-engineering -
Mercury Browser Intent Hijacking: Android File Manager RCE
Mercury BrowserCritical intent hijacking vulnerability in Mercury Browser for Android enabling arbitrary file upload and code execution through file manager abuse.
5 min read rcemobilevulnerability-research