Loading...
Loading...
Found 4 Skills
Exploit development expert. Buffer overflow, shellcode, ROP, format strings, binary exploitation. Use for exploit writing and PoC development.
Firmware / IoT Penetration Chain. Starting from a .bin / .img file, complete the closed-loop process of reverse engineering → extraction → emulation → exploitation. The methodology follows the OWASP FSTM 9-stage framework; the toolchain mainly includes binwalk v3, unblob, EMBA, Firmadyne, AFL++. Applicable scenarios: Router/camera/smart home firmware auditing, firmware upgrade package reverse engineering, IoT CVE reproduction, embedded 0day vulnerability discovery. Trigger keywords: firmware, firmware, IoT, binwalk, unblob, UART, JTAG, squashfs, UBI, JFFS2, Firmadyne, QEMU full-system emulation, EMBA, firmware penetration, router firmware, embedded vulnerability exploitation, bootloader, NVRAM, FAT, firmware analysis toolkit.
Solve CTF binary exploitation challenges by discovering and exploiting memory corruption vulnerabilities to read flags. Use for buffer overflows, format strings, heap exploits, ROP challenges, or any pwn/exploitation task.
Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enabling arbitrary stack reads (%p/%s), arbitrary memory writes (%n/%hn/%hhn), GOT/hook overwrites, and canary/libc/PIE leaks.