Henri Nurmi

Reverse Engineering Quick 6101A2: Can I have your firmware? Find and exploit vulnerabilities in the Quick 6101A2 to extract firmware for full reverse engineering.

A couple weeks ago I didn't see that I'll end up exploiting my fume extractor to bypass the flash readout protection and dump the firmware.

Built an 8-bit adder/subtractor using TTL-style logic with discrete-transistor gates only. Architecture: 8 full adders + 8 XORs for subtraction (~440 transistors, not optimized).

It’s ridiculous but extremely satisfying.

Reverse Engineering Quick 6101A2 Control Protocol - Part 1 In part 1, we'll focus on analyzing and parsing the protocol, mapping the sensor/control registers, then build a simple terminal tool to monitor the fume extractor.

Reverse‑engineered my fume extractor’s control protocol and built a terminal monitor for it. nurmi.me/posts/re-qui...

GitHub - Henkru/cp-dfr-defs: Dynamic Function Resolution (DFR) definitions for Crystal Palace Dynamic Function Resolution (DFR) definitions for Crystal Palace - GitHub - Henkru/cp-dfr-defs: Dynamic Function Resolution (DFR) definitions for Crystal Palace

WinAPI DFR remaps for Crystal Palace to automatically convert Func() to Module$Func(). Goodbye preprocessor macros 👋. github.com/Henkru/cp-df...

Yeah, the perfect reason to pay for a gigabit link!

Modern console gaming in a nutshell:

1. Please update your controller's firmware.
2. Your console's OS needs an update!
3. Oh, and here's a small 150 GB update for your game. Enjoy!

My #lily58 build is complete. The ergo journey started.

Gazzew Boba U4 and MT3 /dev/tty

Introducing the Mutator Kit: Creating Object File Monstrosities with Sleep Mask and LLVM This blog introduces the mutator kit, which uses an LLVM obfuscator to break in-memory YARA scanning of the sleep mask.

Have you ever wanted to mutate Beacon Object Files? Will and I have created a mutator kit that allows you to easily mutate Cobalt Strike sleep masks or BOFs in general.