Tag: reverse-engineering

Articles

• Forensic Reconstruction of Black-Box Protocols

  14 Jun, 2026

  A legacy server is dropping connections with no error codes. I walk through the process of using tcpdump, strace, and gdb to reconstruct a custom binary protocol from scratch.

• Deterministic SNI Extraction in Constrained Networks

  22 May, 2026

  A deep-dive into the failed attempts to force egress via physical NICs using IP aliasing and policy routing, and the subsequent pivot to loopback capture and raw string extraction.

• Intercepting Running Linux Processes with ptrace

  12 Apr, 2026

  A guide to intercepting running Linux processes via ptrace, injecting assembly payloads, and restoring execution state without a restart.

• Java Bytecode Manipulation

  9 Apr, 2017

  Statically analyze and programmatically modify compiled .class files without decompilation. Covers a practical example of changing a bytecode equality operator to alter program behavior, along with additional capabilities like method injection and code insertion.

• Dynamically Load Compiled Java Class

  21 Oct, 2009

  Dynamically load and execute compiled Java classes from byte array using a custom ClassLoader, without writing physical class files to disk. Highlights use cases like license validation, encrypted class delivery, and secure remote code execution.