https://mooofin.github.io/portfolio/ Blog posts on systems programming, compilers, reverse engineering, and digital forensics by sid. en-us Mon, 31 Aug 2026 00:00:00 +0000 https://mooofin.github.io/portfolio/blog/jane-street-asic.html https://mooofin.github.io/portfolio/blog/jane-street-asic.html Mon, 31 Aug 2026 00:00:00 +0000 Reverse-Engineering Jane Street's ASIC - recovering the netlist, cell behavior, and 121-bit key from puzzle.gds to solve a Star Battle hidden in silicon https://mooofin.github.io/portfolio/blog/vehguard.html https://mooofin.github.io/portfolio/blog/vehguard.html Sat, 01 Aug 2026 00:00:00 +0000 Dynamic Analysis of VEH Dispatch and Exception-Context RIP Modification Using ROP Gadgets in ntdll.dll https://mooofin.github.io/portfolio/blog/not-my-modfiles-bestie.html https://mooofin.github.io/portfolio/blog/not-my-modfiles-bestie.html Sun, 02 Aug 2026 00:00:00 +0000 L3AK CTF - Not my mod files bestie (DFIR) - DFIR CTF writeup on ModCollabTool, a Haskell-in-disguise malware targeting a Dark Souls Remastered modder https://mooofin.github.io/portfolio/blog/tsuki-rhythm-game.html https://mooofin.github.io/portfolio/blog/tsuki-rhythm-game.html Wed, 08 Jul 2026 00:00:00 +0000 R3CTF CTF writeup: Digital forensics on a compromised rhythm game, uncovering Python malware, steganography, reverse shells, and wallet draining. https://mooofin.github.io/portfolio/blog/pp-farming.html https://mooofin.github.io/portfolio/blog/pp-farming.html Wed, 01 Jul 2026 00:00:00 +0000 SekaiCTF 2026 blockchain writeup: draining PerformancePointATM twice, once via classic reentrancy and once via a delegatecall storage collision. https://mooofin.github.io/portfolio/blog/s4nct1m0ny.html https://mooofin.github.io/portfolio/blog/s4nct1m0ny.html Fri, 26 Jun 2026 00:00:00 +0000 s4nct1m0ny - macOS DFIR report https://mooofin.github.io/portfolio/blog/shackleton-llvm-gp.html https://mooofin.github.io/portfolio/blog/shackleton-llvm-gp.html Sat, 30 May 2026 00:00:00 +0000 Breeding Better Binaries: Shackleton and the Case for Evolutionary Optimizations in LLVM https://mooofin.github.io/portfolio/blog/risc-v-hypervisor.html https://mooofin.github.io/portfolio/blog/risc-v-hypervisor.html Sat, 23 May 2026 00:00:00 +0000 Here is a thing about RISC-V hypervisors that nobody tells you. The hypervisor extension is twenty CSRs. Not twenty new instructions. Not a separate root privilege level. Not a microcode blob you h... https://mooofin.github.io/portfolio/blog/my-first-llvm-patch.html https://mooofin.github.io/portfolio/blog/my-first-llvm-patch.html Thu, 16 Apr 2026 00:00:00 +0000 My First Patch to LLVM - April 2026 https://mooofin.github.io/portfolio/blog/bootloader.html https://mooofin.github.io/portfolio/blog/bootloader.html Mon, 09 Feb 2026 00:00:00 +0000 So you want to understand how computers actually boot? Not the handwavy "BIOS loads the OS" explanation, but the real, low-level mechanics of what happens when you hit the power button? Good https://mooofin.github.io/portfolio/blog/honeymoon.html https://mooofin.github.io/portfolio/blog/honeymoon.html Mon, 26 Jan 2026 00:00:00 +0000 I Use a Gap Buffer, ehe. https://mooofin.github.io/portfolio/blog/tea-and-psychological-damage.html https://mooofin.github.io/portfolio/blog/tea-and-psychological-damage.html Mon, 29 Dec 2025 00:00:00 +0000 32 Rounds of TEA and Psychological Damage, Surviving a Stripped 32-bit Binary https://mooofin.github.io/portfolio/blog/format-string-3.html https://mooofin.github.io/portfolio/blog/format-string-3.html Mon, 29 Dec 2025 00:00:00 +0000 how to make your program spill tea https://mooofin.github.io/portfolio/blog/ropfu.html https://mooofin.github.io/portfolio/blog/ropfu.html Mon, 29 Dec 2025 00:00:00 +0000 Oops, Your Control Flow Is Mine https://mooofin.github.io/portfolio/blog/strings-dont-lie-packers-do.html https://mooofin.github.io/portfolio/blog/strings-dont-lie-packers-do.html Mon, 29 Dec 2025 00:00:00 +0000 Strings Don't Lie, Packers Do https://mooofin.github.io/portfolio/blog/like-father-like-son.html https://mooofin.github.io/portfolio/blog/like-father-like-son.html Fri, 14 Nov 2025 00:00:00 +0000 Like Father Like Son - DFIR report https://mooofin.github.io/portfolio/blog/vmware.html https://mooofin.github.io/portfolio/blog/vmware.html Tue, 28 Oct 2025 00:00:00 +0000 Slay the JIT: From Hotpatches to Symbolic Couture in Miasm https://mooofin.github.io/portfolio/blog/nixos-flakes.html https://mooofin.github.io/portfolio/blog/nixos-flakes.html Fri, 19 Sep 2025 00:00:00 +0000 Provenance and Purity: Nix programming language & Fixed-Output Flakes https://mooofin.github.io/portfolio/blog/nix.html https://mooofin.github.io/portfolio/blog/nix.html Wed, 06 Aug 2025 00:00:00 +0000 So you've built some amazing software. It runs beautifully on your machine,flawless, fast, and bug-free. You package it up, send it out into the world, and then the emails start pouring in: _"It cr... https://mooofin.github.io/portfolio/blog/an-apple-a-day.html https://mooofin.github.io/portfolio/blog/an-apple-a-day.html Tue, 22 Jul 2025 00:00:00 +0000 House of Apple 2: Subverting glibc Wide-Mode I/O via _wide_data Corruption https://mooofin.github.io/portfolio/blog/gotham-hustle.html https://mooofin.github.io/portfolio/blog/gotham-hustle.html Fri, 11 Jul 2025 00:00:00 +0000 Gotham Hustle, DFIR report https://mooofin.github.io/portfolio/blog/onapookkalam.html https://mooofin.github.io/portfolio/blog/onapookkalam.html Wed, 25 Jun 2025 00:00:00 +0000 While preparing for Onapookkalam, notes were recorded on a mobile device. The phone was suspected to be tampered with, potentially having data modified or deleted. https://mooofin.github.io/portfolio/blog/havok-engine-reverse-engineering.html https://mooofin.github.io/portfolio/blog/havok-engine-reverse-engineering.html Mon, 09 Jun 2025 00:00:00 +0000 Reverse Engineering Proprietary Havoc Engine File Formats