Ilja Krasnjanski·Nov 2Parsing Without Executing: JavaScript Deobfuscation with AcornRebuilding an AES key from sixteen obfuscated fragments with Acorn, and proving it with authenticated decryption without ever running the…
Alexios Gouvielos·Oct 28*102* Misreading . Pointwise Flux and the Geometric Necessity of Phase OrientationIt is generally understood that triboélectricité refers to the production of electrical charge when two materials come into contact. In…
Ranjith rosan·Oct 27I built a static analyzer for MCP servers — here are 5 things I learnedDetecting shell injection in a model-facing tool without ever running the code, and the part of static analysis nobody warns you about.A response icon1A response icon1
Kiell Tampubolon·Oct 25I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including MineIn the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…
Noa Tubic·Oct 14Write your Flutter lint rules in YAMLhouse_rules checks your team’s conventions on every save, without writing an analyzer plugin
Ahemd ashraf·Oct 11Android Static Analysis Pentesting Handbook — Part 1Section 1 — APK Anatomy: ابدأ من الصفر
Mahmoud Alawady·Oct 10Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-upIn this lab, we will analyze lab 1–4 from Practical Malware Analysis book. The goal is to examine the malware sample Lab01–04.exe using…
Cleo Excellen Iskandar·Oct 10Kenapa Masih Pakai SonarQube?Saat mengembangkan fitur dalam sebuah aplikasi, memastikan fitur berjalan sesuai kebutuhan adalah langkah penting. Namun, apakah fitur yang…
Mahmoud Alawady·Oct 5Practical Malware Analysis — Lab 1–1: Basic Static Analysis WriteupA basic static analysis of Lab 1-1 from Practical Malware Analysis book covering imports, strings, compilation details and IOCs
