Tags
How to analyze automotive ECU architectures (PPC-VLE, TriCore) that IDA, Ghidra, and Binary Ninja don't support out of the box. The IR-as-common-language structure of RE tools, the formula for implementing an architecture plugin, and how non-standard calling conventions poison data-flow analysis, with the fix.
Read full articleA draft design for blackbox fuzzing of the LS Electric PLC system, built on analysis of the XGT protocol. Covers automated mutation strategy, crash triage, and the monitoring infrastructure for discovering vulnerabilities in industrial control systems.
Read full articleA security analysis of RAUC, a robust auto-update mechanism used in embedded Linux systems, focusing on update-chain integrity and attack surface.
Read full articleAn in-depth analysis of two vulnerabilities found in Netis MEX605 router firmware v2.00.06: OS command injection via the ping diagnostic tool, and DOM-based XSS in the NTP server configuration.
Read full articleA research summary covering automated dynamic analysis techniques for Linux-based embedded firmware. Explains FIRMADYNE's emulation strategy, peripheral modeling, and vulnerability discovery methodology.
Read full articleA command injection vulnerability found in the WPS PIN handling of the E5600 router — authenticated remote code execution via a crafted WPS PIN parameter
Read full article