xn0px90’s Personal Blog

xn0px90’s Personal Blog

Overview

This is a personal blog and knowledge base focused on reverse engineering, vulnerability research, offensive security, and low-level systems work. The blog serves as a platform for technical writeups, security research findings, CTF solutions, and deep dives into emerging technologies and attack surfaces.

Blog URL: https://xn0px90.com
Repository: https://github.com/xn0px90/xn0px90.github.io
Author: xn0px90
Contact: hackwithme@xn0px90.com

About the Author

xn0px90 is a security researcher, systems engineer, and maker focused on:

  • Vulnerability Research - Discovering, analyzing, and developing exploits
  • Reverse Engineering - Understanding software, firmware, and systems at the bytecode and assembly level
  • Low-Level Programming - Systems internals, operating systems, microkernel design
  • Media Hacking - Multimedia systems, formats, and custom solutions
  • Offensive Security - CTF competitions, bug bounties, penetration testing
  • Futurism & Technology - Following trends in emerging tech and their security implications

The blog philosophy is straightforward: break things apart to understand how they work, and share those insights with the community.

Blog Purpose & Mission

What You’ll Find Here

  1. Technical Writeups
    • CTF competition solutions with detailed explanations
    • Bug bounty discoveries and responsible disclosure timelines
    • Real-world vulnerability analysis
  2. Security Research
    • Deep dives into new vulnerabilities
    • Reverse engineering case studies
    • Malware analysis and threat research
  3. Tool & Technique Documentation
    • Practical guides for security tools (radare2, Frida, etc.)
    • Advanced techniques and methodology
    • Automation and scripting approaches
  4. Systems & Low-Level Topics
    • Operating system internals
    • Architecture and processor design
    • Firmware and embedded systems
    • Memory management and protection mechanisms
  5. Technology Explorations
    • Programming language deep dives
    • GPU computing and graphics APIs
    • Emerging platforms and their attack surfaces

Target Audience

  • Security professionals and penetration testers
  • Reverse engineers and malware analysts
  • Systems programmers and kernel developers
  • CTF competitors and bug bounty hunters
  • Curious developers wanting to deepen technical knowledge
  • Academic researchers in security and systems

Current Blog Posts

Published Articles

1. Howdy Friend! — Welcome to my Blog

  • Date: May 7, 2026
  • Category: Meta
  • Tags: intro, jekyll, blogging
  • Content: Introduction to the blog, overview of topics, and what to expect

2. The Intersection of Machine Learning and Fuzzing

  • Date: May 9, 2026
  • Category: Security, Machine Learning
  • Tags: fuzzing, machine-learning, vulnerability-discovery
  • Topics:
    • Traditional fuzzing limitations
    • Smart input generation with ML
    • Coverage-guided fuzzing enhancements
    • Practical ML-assisted fuzzing workflows
  • Length: ~2,000 words

3. radare2 CVE-40499 Analysis

  • Date: May 27, 2026
  • Category: Security, Reverse Engineering
  • Tags: radare2, cve, security
  • Content: Technical breakdown of a specific CVE with reverse engineering insights

4. WebGPU in Practice, and Why I Built v-webgpu

  • Date: May 31, 2026
  • Category: Web, Graphics, Engineering
  • Tags: webgpu, gpu, javascript, performance, tooling
  • Topics:
    • WebGPU capabilities and advantages
    • Traditional graphics API limitations
    • Building v-webgpu library
    • Performance considerations
    • Pros and cons of WebGPU adoption
  • Length: ~3,500 words
  • Type: Technical framework analysis and development writeup

5. Reverse Engineering PHP with radare2: A Practical Guide

  • Date: October 22, 2026
  • Category: Security, PHP, Reverse Engineering
  • Tags: radare2, php, bytecode, security, analysis
  • Topics:
    • PHP bytecode fundamentals
    • radare2 installation and commands
    • Real obfuscation analysis examples
    • Suspicious pattern recognition
    • Practical reverse-engineering workflow
    • Ethical and legal considerations
  • Length: ~4,000 words
  • Includes: Custom SVG banner with terminal visualization

Content Categories

By Topic

Security & Exploitation

  • Vulnerability research and analysis
  • Exploit development techniques
  • Penetration testing methodologies
  • Malware analysis and reverse engineering

Programming & Systems

  • Low-level programming (C, Assembly)
  • Operating systems and kernels
  • Firmware and embedded systems
  • Memory management and protection

Tools & Techniques

  • radare2 reverse engineering framework
  • Fuzzing and automated testing
  • Dynamic analysis tools (Frida, xdebug)
  • Scripting and automation

Emerging Technologies

  • WebGPU and GPU computing
  • New programming languages (V, Rust)
  • Architecture explorations (RISC-V)
  • Modern OS design (QubesOS, seL4)

CTF & Competitions

  • CTF writeups and solutions
  • Techniques and approaches
  • Tool usage and automation

By Complexity Level

  • Beginner-Friendly: Introductions to tools and concepts
  • Intermediate: Practical guides with code examples
  • Advanced: Deep technical dives, real-world analysis

Technology Stack

Blog Infrastructure

  • Static Site Generator: Jekyll
  • Hosting: GitHub Pages
  • Domain: xn0px90.com
  • Markdown Parser: Kramdown with GitHub Flavored Markdown
  • Code Highlighting: Rouge
  • Security Tools: radare2, Frida, GDB, IDA
  • Languages: V, Python, C, Assembly, PHP, JavaScript
  • Platforms: QubesOS, seL4, RISC-V
  • Frameworks: WebGPU, TensorFlow, AFL

Blog Structure

Directory Organization

xn0px90.github.io/
├── _posts/                    # Blog post markdown files
├── _layouts/                  # Jekyll post and page templates
├── _includes/                 # Reusable template components
├── assets/
│   └── images/               # Post banners and illustrations
├── about.md                  # Author biography
├── tools.md                  # Technology interests and tools
├── index.html                # Homepage
└── _config.yml              # Jekyll configuration

File Naming Convention

Blog posts follow the Jekyll standard: YYYY-MM-DD-post-title.md

Example: 2026-10-22-reverse-engineer-php-with-radare2.md

Front Matter Template

Each post includes YAML front matter:

---
layout: post
title: "Post Title"
date: YYYY-MM-DD HH:MM:SS -0000
categories: [category1, category2]
tags: [tag1, tag2, tag3]
author: xn0px90
---

Reading & Navigating the Blog

Access Points

  1. Homepage (https://xn0px90.com)
    • Recent posts with pagination
    • Quick overview of latest content
  2. Archive View
    • Browse posts by date
    • Filter by category or tag
    • Full post listing
  3. Tools Page (https://xn0px90.com/tools/)
    • Technologies of interest
    • Links to projects and communities
  4. About Page (https://xn0px90.com/about/)
    • Author background
    • Research interests
    • Contact information

Categories

Navigate by topic area:

  • security - Vulnerability research, exploitation
  • reverse-engineering - Binary analysis, disassembly
  • php - PHP-specific content
  • machine-learning - ML applications
  • web - Web technologies
  • graphics - GPU and rendering
  • meta - Blog-related posts

Tags

Fine-grained content classification for specific technologies and techniques:

  • Tool-specific: radare2, frida, gdb
  • Language-specific: python, c, assembly, v
  • Concept-specific: bytecode, fuzzing, ctf, cve
  • Platform-specific: qubesOS, risc-v, seL4

Key Topics & Specializations

Reverse Engineering

  • PHP bytecode analysis with radare2
  • Binary disassembly and analysis
  • Obfuscation recognition and removal
  • Dynamic analysis techniques

Security Research

  • Vulnerability discovery and analysis
  • Exploit development
  • Malware analysis
  • CVE research and writeups

Systems Programming

  • Low-level architecture understanding
  • Operating system internals
  • Memory management
  • Protection mechanisms

Emerging Technologies

  • WebGPU and modern graphics APIs
  • New programming languages (V language)
  • Advanced OS design (QubesOS, seL4)
  • RISC-V architecture exploration

How to Contribute

For Feedback & Discussion

Readers are encouraged to:

  • GitHub Issues: Report errors or suggest improvements
  • Email: hackwithme@xn0px90.com
  • GitHub Discussions: Join conversations about posts
  • Pull Requests: Submit corrections or improvements

Blog Development

The blog repository is open-source. To contribute:

  1. Fork the repository
  2. Create a feature branch for your changes
  3. Make improvements (fix typos, clarify explanations, add resources)
  4. Submit a pull request with description

Requested Contributions

Areas where community input is welcome:

  • Clarifications for complex concepts
  • Additional resources or references
  • Alternative explanations or approaches
  • Tool tips and tricks
  • Real-world applications of discussed techniques

Blog Statistics

Content Volume

  • Total Posts: 5
  • Total Content: ~13,000+ words
  • Average Post Length: 2,600 words
  • Longest Post: 4,000+ words (PHP reverse engineering guide)

Category Distribution

  • Security & Reverse Engineering: 3 posts
  • Technology & Innovation: 2 posts
  • Meta: 0 posts (intro only)

Content Maturity

  • Active Posting: Monthly+ frequency
  • Post Depth: Intermediate to advanced
  • Typical Format: Tutorial + analysis + practical examples
  • Code Examples: Included in most posts

Technologies & Tools Mentioned

  • radare2 - Reverse engineering framework
  • Frida - Dynamic instrumentation toolkit
  • WebGPU - Modern GPU API for web
  • V - Systems programming language
  • QubesOS - Security-focused operating system
  • seL4 - Formal verification microkernel

Programming Languages

  • Python
  • C
  • Assembly (x86, ARM)
  • JavaScript
  • PHP
  • V

Security Concepts

  • Bytecode analysis
  • Opcode interpretation
  • Control flow analysis
  • Pattern recognition
  • Obfuscation techniques
  • Exploit development

Legal & Ethical Stance

Security Research Ethics

All content on this blog:

  • Emphasizes responsible disclosure
  • Includes ethical guidelines for security work
  • Acknowledges legal implications of security research
  • Encourages authorized testing only
  • Respects intellectual property and licensing

Copyright & Attribution

  • Blog Content: Original research and writing by xn0px90
  • External Resources: Properly cited with links
  • Code Examples: Educational; verify licenses before production use
  • Images: Custom illustrations or properly attributed sources

Contact & Social

Direct Contact

  • Email: hackwithme@xn0px90.com
  • GitHub: https://github.com/xn0px90
  • LinkedIn: https://linkedin.com/in/xn0px90

Community Engagement

The blog author is active in:

  • CTF communities
  • Security research forums
  • GitHub open-source projects
  • Security conferences and events

Reading Recommendations

For New Visitors

Start with:

  1. “Howdy Friend! — Welcome to my Blog” (quick intro)
  2. “Reverse Engineering PHP with radare2” (practical guide)
  3. “WebGPU in Practice” (interesting technology exploration)

Then explore:

  • “The Intersection of Machine Learning and Fuzzing” (advanced topic)
  • “radare2 CVE-40499 Analysis” (technical deep dive)

By Interest Level

Newcomers to Security:

  • Start with the PHP reverse engineering guide
  • Gentle introduction with step-by-step examples

Experienced Security Professionals:

  • Jump to CVE analysis and research writeups
  • Explore emerging tool applications

Systems Programmers:

  • WebGPU and architecture topics
  • Low-level systems content

ML Enthusiasts:

  • Machine learning and fuzzing intersection
  • AI-guided security techniques

Blog Maintenance

Update Schedule

  • Posts are published as completed (irregular schedule)
  • No fixed publishing frequency
  • Quality over quantity approach

Corrections & Updates

  • Typos and errors corrected immediately
  • Technical inaccuracies updated with notes
  • Links checked and maintained

Future Content Plans

The blog will continue exploring:

  • Advanced reverse engineering techniques
  • Emerging security challenges
  • New programming language explorations
  • Low-level systems deep dives
  • Practical security research methodologies

Resources & Further Reading

  • Blog: https://xn0px90.com
  • Repository: https://github.com/xn0px90/xn0px90.github.io
  • GitHub Profile: https://github.com/xn0px90

Tool Documentation

  • radare2 Book: https://book.rada.re/
  • Frida Documentation: https://frida.re/docs/
  • WebGPU Spec: https://www.w3.org/TR/webgpu/
  • V Language: https://vlang.io/

Security Resources

  • OWASP: https://owasp.org/
  • PortSwigger: https://portswigger.net/
  • Exploit-DB: https://exploit-db.com/
  • CVE Details: https://cvedetails.com/

License

This blog and its content are published for educational and informational purposes. See individual posts for specific licensing information.

Document Information

  • README Version: 1.0
  • Last Updated: October 22, 2026
  • Author: xn0px90
  • Purpose: Comprehensive blog documentation and navigation guide
  • Audience: Blog readers, contributors, and collaborators

Welcome to the blog. Break things, learn deeply, and share knowledge responsibly.