Reverse engineering · Patrik Grobshäuser https://patrik.re/topics/reverse-engineering/ Firmware, debuggers, and understanding what software does underneath. en-GB Wed, 18 Mar 2026 00:00:00 +0000 Hyoketsu — Solving the Vendor Dependency Problem in RE https://slcyber.io/research-center/hyoketsu-solving-the-vendor-dependency-problem-in-re/ https://slcyber.io/research-center/hyoketsu-solving-the-vendor-dependency-problem-in-re/ Wed, 18 Mar 2026 00:00:00 +0000 Tooling for reverse engineering without waiting on vendor firmware. Searchlight Cyberreverse-engineering Android certificate pinning bypass with Frida https://patrik.re/the-stony-path-of-android--f0-9f-a4-96-bug-bounty-bypassing-certificate-pinning/ https://patrik.re/the-stony-path-of-android--f0-9f-a4-96-bug-bounty-bypassing-certificate-pinning/ Sat, 21 Oct 2017 00:00:00 +0000 A walkthrough of installing the Burp CA on an Android device, running frida-server and using an SSL re-pinning Frida script to intercept traffic from apps that pin certificates. patrik.rereverse-engineering Shopify POS firmware: extracting a root hash https://patrik.re/digging-into-the-shopify-pos-firmware-part-1/ https://patrik.re/digging-into-the-shopify-pos-firmware-part-1/ Fri, 09 Oct 2015 00:00:00 +0000 An in-scope Shopify POS endpoint exposed the card reader's firmware bundles, which unpack via binwalk, a dd carve at 0x202024 and jffs2dump into a JFFS2 root filesystem containing a salted MD5 root hash. patrik.reweb-exploitationreverse-engineering Stop OS X Spotlight Leaking Your Location https://patrik.re/research-stop-osx-spotlight-from-sending-your-location/ https://patrik.re/research-stop-osx-spotlight-from-sending-your-location/ Mon, 15 Jun 2015 00:00:00 +0000 Proxying OS X Spotlight through Burp showed it shipping the user's latitude and longitude to api.smoot.apple.com on every search, with two ways to block the request. patrik.reweb-exploitationreverse-engineering iTunes anti-debugging bypass with GDB and LLDB https://patrik.re/itunes-exploit-development/ https://patrik.re/itunes-exploit-development/ Sun, 10 Mar 2013 00:00:00 +0000 Defeating iTunes' ptrace-based anti-debugging on OS X by breaking on ptrace and rewriting the rdi register, and porting the bypass from Apple's GDB to LLDB to get a Python-capable debugger. patrik.rereverse-engineering