Reverse Engineering | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670	SQL Injection Reverse Engineering Security Code Review	Progress (WhatsUp Gold)	Sina Kheirkhah (@SinSinology)
Firmware Security: Alcatel-Lucent ALE-DeskPhone	VoIP Hacking Hardware Hacking Reverse Engineering Arbitrary File Read TOCTOU Local Privilege Escalation	Alcatel-Lucent	Moritz Abrell (@Moritz_abrell)
CVE-2024-27822: macOS PackageKit Privilege Escalation	Local Privilege Escalation Reverse Engineering	Apple (MacOS)	Mykola Grymalyuk (@Khronokernel)
Exploiting American Conquest	Reverse Engineering Buffer Overflow Memory Corruption Game Hacking	Undisclosed	Thomas Dubier (@Tomtombinary)
CVE-2024-1212: Unauthenticated Command Injection In Progress Kemp LoadMaster	OS Command Injection RCE Reverse Engineering	Progress (Kemp LoadMaster)	David Yesland (@Daveysec)
TP-Link TDDP Buffer Overflow Vulnerability	Reverse Engineering Buffer Overflow Memory Corruption DoS	TP-Link	Olivier Laflamme (@Olivier_boschko)
Exploiting embedded mitel phones for unauthenticated remote code execution	RCE Reverse Engineering Buffer Overflow Memory Corruption Authentication Bypass OS Command Injection	Mitel	Kevin Joensen (@Ggisx)
Hacking a Smart Home Device	IoT Android Reverse Engineering	Undisclosed	James Warner
Hunting for Unauthenticated n-days in Asus Routers	RCE Format String Vulnerability Reverse Engineering Patch Diffing	Asus	TheZero (@Th3Zer0) Suidpit (@Suidpit)
Exploring Counter-strike: Global Offensive Attack Surface	Out-of-Bounds Write Memory Corruption Game Hacking Reverse Engineering Security Code Review	Valve (CS:GO)	Victor Cutillas (@V1csec) Louis Jacotot (@Myr463)
Analyzing the SonicWall Custom Grub LUKS Encryption Modifications	Reverse Engineering	SonicWall	Adam Crosser Michael Weber (@BouncyHat)
Achieving Remote Code Execution in Steam: a journey into the Remote Play protocol	RCE Reverse Engineering Fuzzing Path Traversal Memory Corruption Heap Overflow Format String Vulnerability	Valve	Valentino Ricotta
The Nightmare of Apple's OTA Update: Bypassing the Signature Verification and Pwning the Kernel	Signature Validation Bypass TOCTOU SIP Bypass Downgrade Attack Kernel Hacking Reverse Engineering	Apple (MacOS)	Mickey Jin (@Patch1t)
Hacking a Tapo TC60 Camera	IoT Hardware Hacking Reverse Engineering	Tapo	James (@Two06)
Shambles: The Next-Generation IoT Reverse Engineering Tool to Discover 0-Day Vulnerabilities	IoT Buffer Overflow Command Injection Reverse Engineering	Undisclosed	Olivier Laflamme (@Olivier_boschko)
CVE-2023-33298 - Perimeter81 Local Privilege Escalation	Local Privilege Escalation MacOS Reverse Engineering	Perimeter81	NSEcho (@Lateralusd_)
Reversing Citrix Gateway for XSS	Reflected XSS Open Redirect Reverse Engineering	Citrix Systems	Dylan Pindur
Reverse Engineering Coin Hunt World’s Binary Protocol	Reverse Engineering Spoofing	Coin Hunt World	Qkchambers
Hacking my “smart” toothbrush	IoT Reverse Engineering NFC	Undisclosed	Cyrill Künzi
‘FriendlyName’ Buffer Overflow Vulnerability in Wemo Smart Plug V2	IoT Buffer Overflow Memory Corruption Reverse Engineering	Belkin (Wemo)	Amit Serper (@0xAmit) Reuven Yakar
Compromising Garmin’s Sport Watches: A Deep Dive into GarminOS and its MonkeyC Virtual Machine	IoT Memory Corruption Buffer Overflow Integer Overflow Out-of-Bounds Read Out-of-Bounds Write Type Confusion Permission Bypass Reverse Engineering	Garmin	Tao Sauvage
Impersonating Other Players with UDP Spoofing in Mirror	Game Hacking UDP Spoofing Reverse Engineering	Unity (Mirror)	IncludeSec (@IncludeSecurity)
Reversing UK mobile rail tickets	Reverse Engineering Android	Undisclosed	Zeeshan Mustafa (@By6153)
Reverse Engineering the Apple Multipeer Connectivity Framework	Broken Authorization Reverse Engineering Networking	Apple	Simone Margaritelli (@Evilsocket)
Pentest-Story: Empirum password decryption	Weak Crypto Reverse Engineering	Matrix42	Evait Security GmbH (@Evait_security)

Page 1 of 2