RSSAmplifier

Blog

Pit's Proof Of Concept

A space for experiments and thoughts.

pit.bearblog.devRSS feed ↗10 posts

Latest posts

Modding And Distributing Mobile Apps with Frida

Walkthrough of how to embed frida scripts in apps to distribute proper mods. Supports frida 17+.

A Journey From `sudo` iptables To Local Privilege Escalation

You've landed on a network appliance and you need those fancy privileges? Don't worry, I've got your back!

AlcaWASM Challenge Writeup - Pwning an In-Browser Lua Interpreter

Gamedevs of the world, unite! Your favourite language is in danger -- the l33t wrongdoers have figured out how to BYOB (Bring Your Own Bytecode) and pwn the Lua v5.4 interpreter!

Element Android CVE-2024-26131, CVE-2024-26132 - Never Take Intents From Strangers

Wild trips with intent redirections to compromise an end-to-end encrypted messaging chat.

Hunting for (Un?)authenticated n-days in Asus Routers

Firmware analysis, reverse engineering and binary exploitation shenanigans on Asus routers.

CVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files

N-day exploit for Orthanc. Now featuring polyglot files!

IceCTF 2018 - Twitter Writeup

You can play 8-bit emulators if you want, but isn't it pwning them more fun?

IceCTF 2018 - Fermat string Writeup

How much space can you fit in a format string payload?

GSoC 2018 - Final Report

Recap of my experience in the Google Summer of Code with mitmproxy

GSoC Week 3....4 - Passing the exam

Week 3 and 4 of hacking at mitmproxy for the Google Summer of Code