Reverse Engineering Protobuf Definitions from Compiled Binaries(arkadiyt.com)

127 points by arkadiyt 2 years ago | 11 comments

Reverse Engineering Vercel's BotID(nullpt.rs)

82 points by hazebooth 1 year ago | 13 comments

Building a Browser for Reverse Engineers(nullpt.rs)

70 points by hazebooth 1 year ago | 6 comments

Reverse Engineering and Dismantling Kekz Headphones(nv1t.github.io)

27 points by breakingcups 2 years ago | 1 comments

Reverse engineering and dismantling Kekz headphones(nv1t.github.io)

203 points by mtlynch 2 years ago | 37 comments

Show HN: I'm building a browser for reverse engineers(nullpt.rs)

318 points by nullpt_rs 1 year ago | 42 comments

Blog post from nullpt.rs introducing a custom browser being built for web reverse engineering, deobfuscation, and anti-bot analysis workflows.

Humiliating IIS servers for fun and jail time(mll.sh)

338 points by denysvitali 4 months ago | 82 comments

A blog post on finding and exploiting common misconfigurations in Microsoft IIS web servers, starting from the default IIS splash page.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 27 days ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

My old job feels distant now(pinecoder.dev)

28 points by speckx 10 days ago | 27 comments

A personal blog post on pinecoder.dev reflecting on how the author's previous job now feels distant.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.