The Curious Engineer

All blogs / Security

Silent Signal Techblog

blog.silentsignal.eu

Because we can!

SecurityReverse engineering

’15’20’25
Posts
79 from 5 Dec 2013 to 29 Oct 2026
Posting
now and then (5 in the last year)
Kind
company blog
Feed
https://blog.silentsignal.eu/feed.xml

2026 5

  1. QSYRUPWD, Part 2: Correcting the Rijndael Key Builder
  2. 512 bytes at a time: reconstructing IBM i save-file checksums
  3. IBM Db2 Mirror for i: pre-auth RCE and the road to QSECOFR
  4. The Cipher Behind QSYRUPWD: Reconstructing IBM i Password Hashes
  5. Unauthenticated RCE as QSECOFR via IBM i Management Central

2025 5

  1. IBM i LIBL Autopwn: Kill the Vulnerability Class
  2. Exploit development for IBM i
  3. Rage Against the Authentication State Machine
  4. Vulnerability Archeology: Stealing Passwords with IBM i Access Client Solutions
  5. Story of a Pentester Recruitment 2025

2024 2

  1. Handling Arbitrarily Nested Structures with Burp Suite
  2. Engineering WCF Hacks

2023 4

  1. Technical Details of CVE-2023-30988 - IBM Facsimile Support Privilege Escalation
  2. Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service
  3. Booby Trapping IBM i
  4. Abusing Adopted Authority on IBM i

2022 3

  1. Our new scanner for Text4Shell
  2. Another Tale of IBM i (AS/400) Hacking
  3. Simple IBM i (AS/400) hacking

2021 4

  1. Our new tool for enumerating hidden Log4Shell-affected hosts
  2. Fuzzy Snapshots of Firefox IPC
  3. Adding XCOFF Support to Ghidra with Kaitai Struct
  4. Abusing JWT public keys without the public key

2020 6

  1. Unexpected Deserialization pt.1 - JMS
  2. Tips and scripts for reconnaissance and scanning
  3. Decrypting and analyzing HTTPS traffic without MITM
  4. Uninitialized Memory Disclosures in Web Applications
  5. Unix-style approach to web application testing
  6. Wide open banking: PSD2 and us

2019 6

  1. Patching Android apps: what could possibly go wrong
  2. Evading Cisco AnyConnect blocking LAN connections
  3. Self-defenseless - Exploring Kaspersky’s local attack surface
  4. Decrypting Eazfuscator.NET encrypted symbol names
  5. Drop-by-Drop: Bleeding through libvips
  6. Our take on social engineering

2018 3

  1. The curious case of encrypted URL parameters
  2. Snow cannon vs. unique snowflakes — testing registration forms
  3. Bare Knuckled Antivirus Breaking

2017 6

  1. Emulating custom crytography with ripr
  2. Conditional DDE
  3. Notes on McAfee Security Scan Plus RCE (CVE-2017-3897)
  4. Fools of Golden Gate
  5. Not so unique snowflakes
  6. Beyond detection: exploiting blind SQL injections with Burp Collaborator

2016 7

  1. An update on MD5 poisoning
  2. Bake your own EXTRABACON
  3. Accessing local variables in ProGuarded Android apps
  4. Detecting ImageTragick with Burp Suite Pro
  5. iOS HTTP cache analysis for abusing APIs and forensics
  6. You’re not looking at the big picture
  7. Testing stateful web application workflows

2015 9

  1. Proxying nonstandard HTTPS traffic
  2. Finding the salt with SQL inception
  3. Virtual Bank Robbery - In Real Life
  4. Poisonous MD5 - Wolves Among the Sheep
  5. Testing Oracle Forms
  6. CVE-2014-3440 - Symantec Critical System Protection Remote Code Execution
  7. The story of a pentester recruitment
  8. AIX for Penetration Testers
  9. Code Review on the Cheap

2014 17

  1. WebLogic undocumented hacking
  2. How to get root access on FireEye OS
  3. HP-UX 0day local privilege escalation
  4. Trend Micro OfficeScan - A chain of bugs
  5. ISAKMP hacking - How much should we trust our tools?
  6. Quick and dirty Android binary XML edits
  7. OWASP Top 10 is overrated
  8. SNMP trap?
  9. Sanitizing input with regex considered harmful
  10. From Read to Domain Admin - Abusing Symantec Backup Exec with Frida
  11. Testing websites using ASP.NET Forms Authentication with Burp Suite
  12. JDB tricks to hack Java Debug Wire
  13. Compressed file upload and command execution
  14. Banging 3G rocks
  15. How did I find the Apple Remote Desktop bug? - CVE-2013-5135
  16. Duncan - Expensive injections
  17. WAF bypass made easy

2013 2

  1. Plesk panel decryption
  2. Hello world!