The Curious Engineer

All blogs / Security

evilsocket

evilsocket.net

Hi! This is the security research blog of Simone Margaritelli, an Italian cybersecurity researcher and open-source developer. I build penetration testing tools…

SecurityReverse engineeringAI / MLGo

’15’20’25
Posts
69 from 1 Feb 2014 to 1 Apr 2026
Posting
now and then (2 in the last year)
Kind
personal blog
Feed
https://www.evilsocket.net/atom.xml

2026 1

  1. Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

2025 2

  1. TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
  2. How to Write an Agent

2024 2

  1. Attacking UNIX Systems via CUPS, Part I
  2. Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI

2023 1

  1. Enumerate/Bruteforce/Attack All the Things! Presenting Legba

2022 2

  1. Reverse Engineering the Apple MultiPeer Connectivity Framework
  2. Process Behaviour Anomaly Detection Using eBPF and Unsupervised-Learning Autoencoders

2021 1

  1. Hide Your Servers in Plain Sight, Presenting ShieldWall

2020 1

  1. Just Taking a Break :D

2019 3

  1. Weaponizing and Gamifying AI for WiFi Hacking: Presenting Pwnagotchi 1.0.0
  2. How to Create a Malware Detection System With Machine Learning
  3. Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack

2018 4

  1. Presenting Project Ergo: How to Build an Airplane Detector for Satellite Imagery With Deep Learning
  2. Project PITA: Build a Mini Mass Deauther Using Bettercap and a Raspberry Pi Zero W
  3. Go Is Amazing, So Here's What I Don't Like About It
  4. All Hail Bettercap 2.0, One Tool to Rule Them All.

2017 8

  1. DIY Portable Secrets Manager With a Raspberry Pi Zero and ARC
  2. This Is Not a Post About BLE, Introducing BLEAH
  3. Hacking a Herb Vaporizer to Set Its Temperature Limit From 190C to 6553.5C Remotely
  4. GPD Pocket 7: Impressions, GNU/Linux Installation and Offensive Setup | evilsocket
  5. TLS, Server Name Indication and Why We Need to Encrypt It | evilsocket
  6. TerraMaster NAS TOS <= 3.0.30 Unauthenticated RCE as Root | evilsocket
  7. Android Applications Reversing 101 | evilsocket
  8. Thoughts on WhatsApp E2E Encryption AKA Security Is Real Only if It's the Default. | evilsocket

2016 15

  1. Reversing the Smarter Coffee IoT Machine Protocol to Make Coffee Using the Terminal. | evilsocket
  2. Un Po Di Consigli per Aspiranti Professionisti Del Settore Della Sicurezza Informatica | evilsocket
  3. WiFi Pentesting With a Pineapple NANO, OS X and BetterCap | evilsocket
  4. DISCLOSURE - RCE Against Every Open Source BTS Software. | evilsocket
  5. Samsung Galaxy Apps MITM Vulnerabilities | evilsocket
  6. How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People | evilsocket
  7. Presenting OpenBank, a Safe and Easy to Use BTC Tracker | evilsocket
  8. Hacking Yourself Out of the Banking System and Live Only on BitCoin [EPISODE 2] | evilsocket
  9. Hacking Yourself Out of the Banking System and Live Only on BitCoin | evilsocket
  10. How I Defeated an Obfuscated and Anti-Tamper APK With Some Python and a Home-Made Smali Emulator. | evilsocket
  11. How to Build Your Own Rogue GSM BTS for Fun and Profit | evilsocket
  12. OSX Mass Pwning Using BetterCap and the Sparkle Updater Vulnerability. | evilsocket
  13. Why You Shouldn't Trust CloudFlare's 'Flexible SSL' and How to Bypass It With BetterCap | evilsocket
  14. Autopwn Every Android < 4.2 Device on Your Network Using BetterCap and the addJavascriptInterface Vulnerability. | evilsocket
  15. BetterCap and the First REAL DoubleDirect ICMP Redirect Attack | evilsocket

2015 17

  1. Past, Present and Future of Bettercap | evilsocket
  2. Karma: How Open Source Changed My Life. | evilsocket
  3. Karma: Come l'Open Source Ha Cambiato La Mia Vita. | evilsocket
  4. How to Use Old GSM Protocols/encodings to Know if a User Is Online on the GSM Network AKA PingSMS 2.0 | evilsocket
  5. Bettercap - a Complete, Modular, Portable and Easily Extensible MITM Framework. | evilsocket
  6. How to Root the LG Watch Urbane ( B285 ) | evilsocket
  7. Introducing FIDO, a Minimalistic, IDE-Agnostic C/C++ Project Generator. | evilsocket
  8. Android Native API Hooking With Library Injection and ELF Introspection. | evilsocket
  9. Using ARM Inline Assembly and Naked Functions to Fool Disassemblers | evilsocket
  10. Dynamically Inject a Shared Library Into a Running Process on Android/ARM | evilsocket
  11. Fuzzing With AFL-Fuzz, a Practical Example ( AFL vs Binutils ) | evilsocket
  12. SuperFish AdWare Found Inside X-Notifier Browser Extension Code. | evilsocket
  13. RuberTooth - a Complete Ruby Porting of the Ubertooth Libraries and Utilities. | evilsocket
  14. Hackers Phishing Leakers: A New BitCoin Phishing Social Technique. | evilsocket
  15. Huawei Modems Authentication Bypass | evilsocket
  16. Nike+ FuelBand SE BLE Protocol Reversed | evilsocket
  17. How to Install Metasploit on OS X Mavericks and Yosemite, an Updated Guide | evilsocket

2014 12

  1. dSploit Merges With ZImperium zANTI2 | evilsocket
  2. Back From the Grave: VMWare Host Clipboard Grabber | evilsocket
  3. Back From the Grave: ELF32 Universal Command Injector | evilsocket
  4. How TELCOs Are Bullying Researchers, an Italian Story. | evilsocket
  5. Why Reinventing the Wheel Isn't Always Wrong | evilsocket
  6. About (Re)distributing Open Source Apps ( dSploit ) | evilsocket
  7. Programmatically Identifying and Isolating Functions Inside Executables Like IDA Does. | evilsocket
  8. Libpe - a Fast PE32/PE32+ Parsing Library. | evilsocket
  9. On Windows Syscall Mechanism and Syscall Numbers Extraction Methods | evilsocket
  10. Termination and Injection Self Defense on Windows >= Vista SP1 | evilsocket
  11. Process Introspection for Fun and Profit | evilsocket
  12. How to Hook Win32 API With Kernel Patching | evilsocket