The Curious Engineer

All blogs / Security

StarkeBlog

starkeblog.com

Firmware and Hacking

SecurityReverse engineeringEmbedded / microcontrollersLinux / Unix

Posts
93 from 19 Jul 2015 to 28 Nov 2025
Posting
now and then (1 in the last year)
Kind
personal blog
Feed
https://starkeblog.com/feed.xml

2025 2

  1. Universal Denial of Service
  2. Presentation Slide Decks

2024 7

  1. CVE Wednesday - CVE-2024-20439
  2. Chat GPT 4o vs. Codestral for Linux Kernel Modules
  3. TempleOS Reverse Engineering
  4. Thecus NAS Firmware Decryption
  5. iGoat Challenge Write up
  6. Backdooring Dotnet Applications
  7. Reverse Engineering Dotnet Applications

2023 11

  1. Introducing Linux Firmware DB
  2. CVE Wednesday - CVE-2021-39297
  3. CVE Wednesday - CVE-2023-145{6,7,8}
  4. Grubcore - Music with Grub2
  5. Determining U-Boot Base Address without uImage
  6. CVE Wednesday - CVE-2022-40021
  7. U-Boot HTTP Client
  8. CVE Wednesday - CVE-2022-34400
  9. CVE Wednesday - CVE-2022-46456
  10. CVE Wednesday - CVE-2022-43973
  11. Fun and Games with Intel AMT

2022 10

  1. Reverse Engineering MenuetOS 64 - Primary Boot Loader
  2. Extracting BIOS Image from Lenovo Update Exe
  3. Backdooring Grub2
  4. DisplayLink USB Video Card for EFI
  5. MAC Address Changing Revisited
  6. SMM Callouts in HP Products
  7. SMM Callouts via Notify
  8. Reverse Engineering a Netgear Nday
  9. Is it JS or Tar? A Polyglot Story
  10. HP Firmware DXE Extraction

2021 24

  1. 2021 End of the Year Post
  2. Raspberry Pi4 VC4 Bootloader Analysis
  3. Onn Laptop SMI Analysis
  4. UEFITool and Reset Vector
  5. Hexdump to Binary
  6. Device Coredump and Firmware Images
  7. Realtek Wifi Firmware: Part 1
  8. AT51 Libfind Results - Keil Toolchain
  9. ACER Predator Helios 300 Complaint / BIOS Analysis
  10. BIOS Disconnect Vulnerability Diffing
  11. Enumerating SMI Handlers
  12. Netgear S8000 Custom Firmware
  13. Firmware Archaeology II: Return of the Devshell
  14. Firmware Archaeology I: Netgear GS110TPv2
  15. Bruteforcing Ghidra File Offsets
  16. Inpoutx64.sys Windows Driver Analysis
  17. Beginning SMM Module Analysis
  18. Ghidra-firmware-utils Adventure
  19. Kexec and Kdump on Raspberry Pi
  20. Denial of Service in NMRP Protocol
  21. U-Boot Fuzzing
  22. Netgear Bootloader Analysis: Part 2
  23. How to Execute Raw U-Boot Bootloader Binary with QEMU
  24. Netgear Bootloader Analysis

2020 15

  1. Loading Das U-Boot Images in Ghidra
  2. ONN Laptop BIOS Exploration
  3. Running GCC 10's Static Analyzer Against the Linux Kernel
  4. Modifying BIOS Using RU.EFI
  5. Decrypting DLINK Proprietary Firmware Images
  6. Linksys EA4500 v3.0 Firmware Decryption
  7. Linksys EA4500 v1.0 Write Up
  8. Linksys WRT54G - v3.1
  9. Dial Up Connections on Linux
  10. CVE-2020-8597 - Buffer Overflow in pppd
  11. Building and Running OVMF in Qemu
  12. Car hacking with ScanTool ECUSim 2000
  13. Netgear Signed TLS Cert Private Key Disclosure
  14. Python MAC Address Stress Test Script
  15. Resize Ghidra for High DPI screens

2019 7

  1. Rsync Protocol Auth Flow in Python
  2. Change MAC Address Permanently
  3. Yardstick One Setup
  4. Cisco IOS GDB RSP Debugger Script for PowerPC-based models
  5. Python Find Information Scripts
  6. Reversing Raw Binary Firmware Files in Ghidra
  7. Extract Netgear .chk Firmware

2018 3

  1. JScrambler Review
  2. Dell Precision 7510 System Failure after Monitor turns off in Ubuntu 16.04 / 17.10 / 18.04
  3. Xen - Connect two VMs via Virtual Serial Port

2017 4

  1. Windows Process Token Bitwise AND To Get Real Value
  2. Create Debian PowerPC32 VM Under QEMU
  3. Setting up an ARMEL Reverse Engineering / Debug Lab in QEMU
  4. NodeJS Slowloris Implementation

2016 6

  1. SOAP Calls for UPnP Services in WeMo Devices
  2. Example of Exploiting JWT in NodeJS
  3. DLink DCS 930L
  4. How to find all strings and comments in source code
  5. How to make a Release Android App debuggable
  6. A script to grab Iowa House Sessions and concatenate them together

2015 4

  1. CSharp Security Vulnerability Egrep Cheatsheet
  2. Python Security Vulnerability Egrep Cheatsheet
  3. NodeJS Security Vulnerability Egrep Cheatsheet
  4. PHP Security Vulnerability Egrep Cheatsheet