The Curious Engineer

All blogs / Security

Atredis Partners

atredis.com/blog

Security research, vulnerability analysis, and technical writing from Atredis Partners.

SecurityReverse engineering

’18’19’20’21’22’23’24’25’26
Posts
43 from 1 May 2018 to 28 Oct 2026
Posting
monthly (7 in the last year)
Kind
company blog

2026 5

  1. Turning the Valve - Exploiting RCE and LPE in the Steam Platform
  2. Dibs on the Fun Part
  3. Bad News for the Average Pentester
  4. Finding Gadgets Like it’s 2026
  5. General Graboids: Worms and Remote Code Execution in Command & Conquer

2025 9

  1. Designing a Passive LiDAR Detector Device - Firmware
  2. Designing a Passive LiDAR Detector Device - Hardware
  3. Drawbot: Let’s Hack Something Cute!
  4. Where’s the Money - Supplemental Findings
  5. Uncovering Privilege Escalation Bugs in Lenovo Vantage
  6. A Peek into an In-Game Ad Client
  7. 3D Printing Flying Probe Test Harnesses: Can you?
  8. Node is a loader
  9. Advisory Blog Series: HIPAA Security Rule Updates

2024 5

  1. Advisory Blog Series: Ransomware Readiness Part 2 – What Does it Really Mean to be Ready?
  2. Some Thoughts on Worker Ownership
  3. How to Train Your Large Language Model
  4. Hacking Exchange from the Outside In
  5. Scrutinizing the Scrutinizer

2023 1

  1. A LibAFL Introductory Workshop

2022 5

  1. Symbolic Triage: Making the Best of a Good Situation
  2. Researching Crestron WinCE Devices
  3. Advisory Blog Series: Ransomware Readiness Part 1 – To Pay or Not to Pay
  4. Veni, MIDI, Vici — Conquering CVE-2022-22657 and CVE-2022-22664
  5. Unauthenticated Remote Code Execution Chain in SysAid ITIL

2021 6

  1. Exploring Unified Diagnostic Services with uds-zoo
  2. Sophos UTM Preauth RCE: A Deep Dive into CVE-2020-25223
  3. Le Zeek, C’est Chic: Using an NSM for Offense
  4. CVE-2021-32030: ASUS GT-AC2900 Authentication Bypass
  5. NANDcromancy: Live Swapping NAND Flash
  6. QEMU and U: Whole-system tracing with QEMU customization

2020 3

  1. Authenticated RCE in Pydio (Forever-Day) -- CVE-2020-28913
  2. A Watch, a Virtual Machine, and Broken Abstractions
  3. Flamingo Captures Credentials

2019 4

  1. Use the Source, Luke
  2. CVE-2019-4061: Harvesting Data from BigFix Relay Servers
  3. CVE-2019-5513: Information Leaks in VMWare Horizon
  4. CVE-2018-7117: A Somewhat Accidental XSS in HPE iLO

2018 5

  1. Fun with SolarWinds Orion Cryptography
  2. Revolving Door Pentesting
  3. CVE-2018-0952: Privilege Escalation Vulnerability in Windows Standard Collector Service
  4. GE Healthcare MAC 5500 Vulnerabilities
  5. Escalating Privileges with CylancePROTECT