eikendev
security engineering

Hello world.

My name is Raphael. I have a big passion for information security and security engineering. Below you'll find some projects of mine that I'd love for you to check out. If you have any thoughts, suggestions, or just want to chat about all things tech, don't be shy and reach out!

GitHub Bluesky

recent posts

all posts
2026.11 Can open-weight models find a 0-day RCE? ai llm security vulnerability-research open-weight 2026.11 Can open-weight models reverse-engineer a stripped Rust binary? ai llm reverse-engineering rust open-weight 2022.03 Cracking With Hashcat in the Cloud aws cloud cracking hashcat 2021.02 How to Break Your JAR in 2021 - Decompilation Guide for JARs and APKs reverse-engineering android java

security research

all 5
MeTube
Forged state file to command execution

A client with access to the MeTube API could plant a queue file in MeTube’s state directory that runs a shell command after restart.

remote code execution CVSS 8.1 · high
sudo
Intercept and log bypass via int 0x80

x86_64 binaries using the legacy int 0x80 syscall path slipped past sudo’s command interception and logging.

security bypass
sudo-rs
sudoedit symlink race to root

A symlink race in sudoedit let a user allowed to edit one file write into any directory, escalating to root.

privilege escalation CVE-2026-120696 CVSS 6.4 · medium
rsyslog
Remote crash via regex framing

Unauthenticated remote crash of rsyslogd through crafted TCP input to regex-framed imptcp listeners.

denial of service CVE-2026-19654 CVSS 7.5 · high

personal projects

(more on GitHub) all 13
PushBits Go

Delivers self-hosted push notifications over Matrix with a web API, user/app management, and multi-user support.

self-hosted automation
MIT since 2020 ghcr.io
java-decompiler Dockerfile

Bundles popular Java decompilers (CFR, Fernflower, Krakatau, Procyon) in a single Docker image to reduce setup friction.

security reverse-engineering
MIT since 2021 ghcr.io
hackenv Go

Provisions short-lived security testing VMs (Kali/Parrot) with libvirt, streamlined SSH, shared folders, and UI access for CTFs and labs.

security cli linux
MIT since 2020 pkg.go.dev
sectxt Rust

Validates security.txt (RFC 9116) files by probing for reachable disclosure contacts in a consistent, machine-readable format.

security cli
MIT since 2020 crates.io
minigist Python

Summarizes Miniflux unread articles with an LLM and writes structured summaries back to entries with per-feed prompts.

cli automation
MIT since 2025 PyPI
urlprobe Rust

Checks URL availability in bulk with a small CLI suited for CI, link health checks, or monitoring.

cli devtools
MIT since 2020 crates.io
+7 more
tbunread dotfiles tech-calendar cheergo vim-textobj-names statusinfo2 taskseed
view all projects

Say hello.

Thoughts, suggestions, or just want to chat about all things tech? Reach out.

eikenberg.at Bluesky X