A walkthrough of the Ignite TryHackMe room — an easy Linux box running an outdated Fuel CMS with a public RCE, escalated via the PwnKit (CVE-2021-4034) pkexec vulnerability.

Working on a deep dive into building wad — an ELF packer from scratch.

CompanionCube32 is a modding tool for Portal (2007) that injects a DLL into the game process and renders a DX9 overlay via vtable hooking. It’s two components: a command-line injector that gets the DLL into the target, and the DLL itself that intercepts the render pipeline and draws with Dear ImGui.

peachykeen32 is a toy shell for ARM32 Linux written entirely in hand-written ARM assembly. No libc, no CRT, no linker scripts. Everything — input parsing, string comparison, I/O — goes through direct Linux syscalls via svc #0. It’s about 400 lines of .s and runs under QEMU or on bare-metal ARM hardware.

comfy is a compiled scripting language that targets ARM32 Linux with direct syscall access. The compiler is written in Rust, the output is ARM32 GNU assembler, and the runtime model is bare-metal — no libc, no CRT. You write high-level code with variables and syscall wrappers, and the compiler emits a static ARM32 binary with no dependencies.

gb-emu is an emulator for the original Game Boy that implements the LR35902 CPU and memory bus but stops short of the PPU. The PPU is the hardest component in the system — everyone gets stuck there — and I wanted to write up what did work rather than waiting until the whole thing is finished. A working CPU with a cycle-accurate memory bus is already enough to load, decode, and step through commercial ROMs up to the point they start asking for video memory.