Featured · findings

Anonymous, Allegedly: Reverse-Engineering the 2022 YikYak Relaunch

A responsible-disclosure writeup of privacy and data-leakage flaws in the relaunched YikYak Android app — where 'anonymous' turned out to be a UI decision, not a backend guarantee.

Read the writeup →
Anonymous, Allegedly: Reverse-Engineering the 2022 YikYak Relaunch
notes

How to Install Fedora 42 with Full Disk Encryption, Snapshot, and Rollback Support

This is an archived copy - I DID NOT write this This is a direct copy of this excellent write up by Madhu Desai that I saved for my own personal refe

May 9, 2025
20 min read
notes

Unlocking the FM350-GL

Is this legal? If you are using a US based mobile provider with a US based SIM card, this might not be legal. Lenovo's own unlock tool continues

May 9, 2025
4 min read
notes

WoL Magic Packet

Wake on LAN Quick notes defining the standard magic packet used for Wake on LAN. Packet Header 0xFF repeated, 6 times. Packet Payload AABBCCDDE

Apr 23, 2025
2 min read
notes

Gameboy (DMG-01) PPU Notes

Incomplete and a WIP These handwritten notes are a WIP and are some things I scribbled down as I was going through the implementation of the PPU for

Aug 22, 2023
1 min read
notes

Reverse Engineering Android APKs

This is a quick reference for how I usually approach reverse engineering Android apps for the purposes of research, pentesting, bug bounty, etc. I pla

Jan 24, 2023
2 min read
notes

De-anonymization Tools

Below is a list of tools, articles, and research related to de-anonymization, as well as some anonymization specific tooling designed to counter de-an

Jan 22, 2023
1 min read
notes

HackRF TXCO Install

Quick reference for installing the TCXO on a HackRF One. Pinout The TCXO module gets installed on the 12-pin P22 connector on the HackRF One. You w

Nov 27, 2022
1 min read