Tag: reverse-engineering

An exact-image search for custom pixels in the J285 cluster closed one promising callback and found a conditional drawing-buffer route with a harder timing problem.

A one-word menu retarget froze the MIB2 twice before revealing the rule for a safe route. Nineteen USB runs later SMB3 accepted controller reports.

Three days from a locked Volkswagen head unit to a root Telnet shell and the first native frame on its display.

Reading the driver door module's memory, backing it up twice, and changing three bytes so the mirrors fold when I lock the car. Every refusal and dead end is in the record.

The first bytes the adapter ever sent me, and the discovery that the car ignores UDS and answers an older Volkswagen transport instead.

Getting a 2013 EEG headset to emit packets and then decrypting them, once I stopped trusting the documentation and scored candidate keys against real data.