Featured · findings

Anonymous, Allegedly: Reverse-Engineering the 2022 YikYak Relaunch

A responsible-disclosure writeup of privacy and data-leakage flaws in the relaunched YikYak Android app — where 'anonymous' turned out to be a UI decision, not a backend guarantee.

Read the writeup →
Anonymous, Allegedly: Reverse-Engineering the 2022 YikYak Relaunch
notes

How to Install Fedora 42 with Full Disk Encryption, Snapshot, and Rollback Support

This is an archived copy - I DID NOT write this This is a direct copy of this excellent write up by Madhu Desai that I saved for my own personal reference while using this as a baseline install guide. Please refer to the linked write up for any updates and to see the comment discussion Fedora Linux 42 is here! Fedor

May 9, 2025
20 min read
notes

Unlocking the FM350-GL

Is this legal? If you are using a US based mobile provider with a US based SIM card, this might not be legal. Lenovo's own unlock tool continues to block any US based carrier SIM cards. If you do the unlock yourself, you can get around the region restriction, but you may enter a legal gray area in doing so. This i

May 9, 2025
4 min read
notes

WoL Magic Packet

Wake on LAN Quick notes defining the standard magic packet used for Wake on LAN. Packet Header 0xFF repeated, 6 times. Packet Payload AABBCCDDEEFF MAC Address (IEEE 802 MAC-48), repeated 16 times. Packet Structure type MACAddr [6]byte type MagicPacket struct { header [6]byte payload [16]MACAddr } Exampl

Apr 23, 2025
2 min read
notes

Gameboy (DMG-01) PPU Notes

Incomplete and a WIP These handwritten notes are a WIP and are some things I scribbled down as I was going through the implementation of the PPU for my Gameboy emulator project (ferrum). Download PDF: GameBoy+PPU_230822_162133.pdf

Aug 22, 2023
1 min read
notes

Reverse Engineering Android APKs

This is a quick reference for how I usually approach reverse engineering Android apps for the purposes of research, pentesting, bug bounty, etc. I plan to write a more in-depth guide at some point in the future. Installing Tools sudo pacman -S android-tools jdk-openjdk jre-openjdk paru -S android-apktool-git apk-edi

Jan 24, 2023
2 min read
notes

De-anonymization Tools

Below is a list of tools, articles, and research related to de-anonymization, as well as some anonymization specific tooling designed to counter de-anonymization methods. This list will grow as I come across more things. Shout out to sizeof(cat) who posted an initial list that I am using as starting point as I explore

Jan 22, 2023
1 min read
notes

HackRF TXCO Install

Quick reference for installing the TCXO on a HackRF One. Pinout The TCXO module gets installed on the 12-pin P22 connector on the HackRF One. You will want to install the module on pin 1, which is closest to CLK IN / OUT on most boards. Testing To test, you will want to run the following command, which can be bui

Nov 27, 2022
1 min read