Joined October 2012
- Tweets 1,219
- Following 2,233
- Followers 2,535
- Likes 5,528
94 Photos and videos
Pinned Tweet
4 Jul 2021
I finally took the time to distill my key research projects on my website with diagrams and artifact links. I'm really proud to have led and worked on so many exciting and challenging projects across the firmware, systems, and mobile security spaces.
hernan.de/research/
4
15
79
21h
This is incredible!
Jun 12
The rax emulator now lives under the Hex-Rays brand github.com/HexRaysSA/rax
5
424
The most challenging part of writing "The Secret Life of Circuits" wasn't the writing process. It was crafting over 290 full-color illustrations on my own design.
I think they set the book apart. For a no-strings-attached sample chapter, check out: lcamtuf.coredump.cx/electron…
19
124
1,227
50,245
May 1
Pretty sweet WASM emulator! Quite nostalgic to see ancient Android UI copy.sh/v86/?profile=android
3
425
Apr 22
Got a new monitor to be more productive and of course it doesn't work out of the box when combined with my KVM and the Intel i915/Xe driver. Multiple hours later learning about EDID and i2c and the problem is "fixed" (debugfs edid_override), but now I'm trying to figure out KVM firmware updates...
2
3
913
Apr 22
Okay gave it a good soak. Not sure if I fully reflowed it but the connection is stable now. Will wait for it cool down before I call it done
159
Mar 11
Not even half way through March this guy declares manual CTFing dead because he got 1st place for 2026 on CTFTime through volume 😂
Here's the CTFs he's played in this year: ctftime.org/team/248318
CTFTime scoring model and voting system has as long as I can remember been very subjective (i.e. broken). This is giving "XBOW is the best hacker on HackerOne" energy.
But lest I be accused of "cope" yeah I agree A.I. has permanently altered the meta and there's no going back. I'm out of the game these days but I have nostalgia for my active seasons of playing, challenge writing, and hosting CTFs before the "A1"
CTF is cooked
blog.krauq.com/post/ctf-is-d…
3
1
32
5,151
Mar 11
Pretty interesting SIP SDP vulnerability that uses a stack clash as the trigger. SIP headers are tricky to get right which makes this PoC cool. What's most interesting to me is that you can just execute shellcode after corrupting a function pointer. I have not done VR for UNISOC so this comes as surprise to me given other modem vendors have worked to eliminate RWX sections (not always successfully I might add). The next question I have is would this payload even survive transiting various carrier networks, each of which may have their own weird IMS infrastructure configurations
🚨 New advisory was just published!
A critical vulnerability in UNISOC modem firmware allows one User Equipment (UE) to remotely attack another over the cellular network. By sending specially crafted malformed SDP within SIP signaling messages, an attacker can trigger memory corruption in the target modem, potentially leading to remote execution of arbitrary native code on the victim device: ssd-disclosure.com/unisoc-t6…
1
1
22
3,654
Mar 3
Whoa, librasn is a rust ASN.1 parsing library that has a non-trivial compiler and supports multiple codec types (including UPER/PER!). I Wonder how it would do with 3GPP RRC parsing
2
1
9
1,224
28 Sep 2025
Finally getting back to hardware after an extended period. I'm going to be prototyping a Bluetooth LE peripheral paired with an Android/iOS app. Hopefully will lead to a PCB design and some 3D printing.
1
5
957
28 Sep 2025
I've been suffering under the Texas Instruments code composer studio thumb and I'm about to give up and use Zephyr. zephyrproject.org/
I remembered CCS being bad but man the Linux support is really bad. Give me VSCode and make...
1
2
386
28 Sep 2025
The chip I've chosen for prototyping is the CC2340R5, which supports multiple RF protocols including BlueTooth LE. It's got a Cortex-M series and has a standby mode power draw of around 300 nA. Since I plan on using a CR2032 to power my design, this will be most welcome
2
308