The Curious Engineer

All blogs / Security

RET2 Systems Blog

blog.ret2.io

The RET2 Engineering Blog documents some of the research and technical musings of our engineers in the subjects of computer security, vulnerability research,...

SecurityReverse engineering

’17’18’19’20’21’22’23’24’25’26
Posts
34 from 20 Sep 2017 to 11 Jun 2025
Posting
now and then
Kind
company blog
Feed
https://blog.ret2.io/feed.xml

2025 2

  1. Streaming Zero-Fi Shells to Your Smart Speaker
  2. Exploiting the Synology DiskStation with Null-byte Writes

2024 2

  1. Pwn2Own Automotive: Popping the CHARX SEC-3100
  2. Pwn2Own Automotive: CHARX Vulnerability Discovery

2023 1

  1. JTAG ‘Hacking’ the Original Xbox in 2023

2022 3

  1. The LDT, a Perfect Home for All Your Kernel Payloads
  2. Exploiting Intel Graphics Kernel Extensions on macOS
  3. Exploiting an Unbounded memcpy in Parallels Desktop

2021 6

  1. What’s New in Tenet v0.2
  2. Snapcraft Packages Come With Extra Baggage
  3. All Your Base Are [Still] Belong To Us Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers
  4. The Oddest Place You Will Ever Find PAC Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary
  5. 32 bits, 32 gigs, 1 click... Exploitation of a JavaScriptCore WebAssembly Vulnerability
  6. Tenet: A Trace Explorer for Reverse Engineers Conventional Debuggers Are Crumbling to Software Complexity, Now What?

2020 3

  1. Lucid: An Interactive Hex-Rays Microcode Explorer Studying decompiler internals has never been so easy...
  2. 7 Days to Lift: A Mission in Microcode Extending the Hex-Rays Decompiler to Support Intel AVX Instructions
  3. What's New in Lighthouse v0.9 Python 3, custom coverage formats, coverage cross-refs, themes & more

2019 2

  1. A Cryptocurrency Heist, Starring Your Web Browser Abusing well-defined web standards to exploit localhost services
  2. In Transactional Memory, No One Can Hear You Scream Attacking Intel's Transactional Synchronization Extensions

2018 9

  1. What's New in Lighthouse v0.8 Binary Ninja support, HTML coverage reports, consistent styling
  2. Scaling up Binary Exploitation Education Augmenting Esoteric Security Subjects with Gamification & Accessibility
  3. Exploiting the macOS WindowServer for root Four Heap Sprays, Two Dangling Pointers, One Bitflip
  4. Cracking the Walls of the Safari Sandbox Fuzzing the macOS WindowServer for Exploitable Vulnerabilities
  5. Weaponization of a JavaScriptCore Vulnerability Illustrating the Progression of Advanced Exploit Primitives In Practice
  6. Timeless Debugging of Complex Software Root Cause Analysis of a Non-Deterministic JavaScriptCore Bug
  7. Vulnerability Discovery Against Apple Safari Evaluating Complex Software Targets for Exploitable Vulnerabilities
  8. A Methodical Approach to Browser Exploitation The Exploit Development Lifecycle, From A to Z(ero Day)
  9. Building up from the Ethereum Bytecode Practical Decompilation of Ethereum Smart Contracts

2017 6

  1. What's New in Lighthouse v0.7 Frida, C++ demangling, context menu, function prefixing, bugfixes
  2. Dangers of the Decompiler A Sampling of Anti-Decompilation Techniques
  3. What's New in ripr v1.1 Function Arguments, Basic Block Mode, and more
  4. Untangling Exotic Architectures with Binary Ninja Supplementing Flare-On 2017 with some sanity
  5. What's New in Lighthouse v0.6 Intel pintool, cyclomatic complexity, batch load, bugfixes
  6. Hello World Compiling Executables for the Classic POSIX Subsystem on Windows