x86_64 binaries using the legacy int 0x80 syscall path slipped past sudo’s command interception and logging.
Hello world.
My name is Raphael. I have a big passion for information security and security engineering. Below you'll find some projects of mine that I'd love for you to check out. If you have any thoughts, suggestions, or just want to chat about all things tech, don't be shy and reach out!
recent posts
all postssecurity research
all 4A symlink race in sudoedit let a user allowed to edit one file write into any directory, escalating to root.
Unauthenticated remote crash of rsyslogd through crafted TCP input to regex-framed imptcp listeners.
Read Signal-encrypted private chats in a Bluetooth mesh messenger through a race in its libsignal integration.
selected projects
all 13Summarizes CPU temperature and memory usage for Linux desktops via a lightweight CLI suited for terminals and status bars.
Summarizes Miniflux unread articles with an LLM and writes structured summaries back to entries with per-feed prompts.
Expands CalDAV recurring task rules into individual upcoming tasks so all clients (even without RRULE support) stay consistent.
Provisions short-lived security testing VMs (Kali/Parrot) with libvirt, streamlined SSH, shared folders, and UI access for CTFs and labs.
Validates security.txt (RFC 9116) files by probing for reachable disclosure contacts in a consistent, machine-readable format.
Notifies maintainers about new stars, watches, and forks via a lightweight local CLI that keeps engagement signals out of GitHub’s UI.
Say hello.
Thoughts, suggestions, or just want to chat about all things tech? Reach out.