Pillow Talk
How a 1990s image format turns a single Image.open() into a shell. Auditing the native stack, finding the bug where nobody looks, and walking a heap overflow through a fake Python type into system().
Mean Girls: High School Showdown
Reverse engineering of an abandonware game whose only available copy is suspected of being used as a malware distribution vector. Unpacking, validating, debunking. And on Wednesdays we wear pink.
The Thrill of the Hunt
An ode to malware hunting and dissection through a Lumma Stealer case study, from YouTube cheat bait to in-depth configuration and protocol breakdown.
UFT One password encoding
A look into UFT One's password encoding format, how I reversed it using static analysis, and why treating obfuscation as security can be risky.