l
lucid_duck

Lucid Duck

@lucid_duck
4,9(30)

Reverse engineering reality

Canada
Inglese
Alcune informazioni sono riportate in lingua inglese.
Chi sono
I reverse engineer embedded systems and find the bugs that aren’t supposed to exist. Recent work includes: • Command injection → root shell in enterprise VPN firmware (CVSS 9.8) • D-Bus authentication bypass in IoT security cameras (CVSS 8.8) • Linux kernel wireless driver patches under maintainer review I work directly with stripped binaries, no source code or documentation. I deliver clear reports, PoCs, and remediation guidance Portfolio: https://justthetip.ca Kernel work: https://lore.kernel.org/linux-wireless/?q=lucid_duck%40justthetip.ca GitHub: https://github.com/Lucid-Duck... Continua a leggere

Competenze

l
lucid_duck
Lucid Duck
offline • 
Tempo di risposta medio: 2 ore

Consulta i miei servizi

Programmazione e tecnologia
I will reverse engineer your binary, protocol, or compiled code
Programmazione e tecnologia
I will analyze your device or firmware for security vulnerabilities

Portfolio

Esperienza lavorativa

Vulnerability research and Linux kernel development

Lucid Duck • Lavoratore autonomo

Dec 2024 - Present1 yr 5 mos

Black-box vulnerability research and Linux kernel development. 5 critical/high findings (CVSS 7.1-9.8) across enterprise products. All work done without source code or vendor documentation. VULNERABILITY RESEARCH: Enterprise VPN Infrastructure: Command injection → root shell (CVSS 9.8) Weaponized legitimate VPN client into exploit delivery by chaining misconfigurations Built rogue IKEv2 servers (StrongSwan) to safely validate exploits prior to disclosure IoT & Embedded Devices: D-Bus authentication bypass in security cameras (CVSS 8.8) Privilege escalation via world-writable Unix socket in endpoint protection software (CVSS 7.1) Firmware extraction and analysis on ARM and x86 embedded Linux platforms Protocol Reverse Engineering: Reconstructed Cap’n Proto IPC protocols from stripped binaries Decoded proprietary XML schemas and binary serialization formats Built custom Python fuzzers to test encrypted message parsers Database Exploitation: SQL injection achieving xp_cmdshell-level system compromise Error-based extraction techniques against Windows SQL Server All findings disclosed via direct vendor contact or Bugcrowd with CVSS scoring, CWE classification, working PoCs, and remediation guidance. LINUX KERNEL DEVELOPMENT: Wireless driver patches submitted to linux-wireless (rtw89, mt76): Fixed TX flow-control bug causing ~200× packet loss in USB drivers Identified race condition in URB completion callbacks and implemented atomic fix Debugged mac80211 TX power reporting issues Patches under maintainer review by Realtek and MediaTek engineers Tools: Ghidra, IDA, GDB, ftrace, Wireshark, Burp Suite, Python, StrongSwan

30 Recensioni
4,9

(29)
(1)
(0)
(0)
(0)
Valutazione dettagliata
  • Livello di comunicazione del venditore
    4,9
  • Qualità della consegna
    4,9
  • Valore della consegna
    4,9
1-5 di 30 recensioni
Ordina per
Più rilevante
    B

    berg000

    Cliente abituale

    CH

    Svizzera

    5

    Duck is exceptionally professional. He is always there to help us with any copywriting task. He provides valuable insights that help our business move forward day by day. This is our countless orders. The copy he delivered is top-notch. Highly highly recommended. Thank you!

    100 USD-200 USD

    $

    13 giorni

    Tempo

    Utile?
    No
    A
    image-docs

    anaxdesign

    MA

    Marocco

    5

    Great job Lucid. The article was better than expected.

    Fino a 50 USD

    $

    5 giorni

    Tempo

    Utile?
    No
    S
    image-docs

    skylr

    US

    Stati Uniti

    4

    Did a great job. Don't be afraid to hire him.... He'll come through for you and deliver what you ask for.

    50 USD-100 USD

    $

    10 giorni

    Tempo

    Utile?
    No
    S
    image-docs

    skyrocketblue

    Cliente abituale

    US

    Stati Uniti

    5

    Great job!

    Fino a 50 USD

    $

    4 giorni

    Tempo

    Utile?
    No
    J

    jezabelgr

    DE

    Germania

    5

    This is the first time I work with Lucid and I was very pleased with the delivery. He rewrote 10 of my blogs that needed a different perspective, transforming them into captivating reads with a unique and funny perspective; something completely different to the standard blogs tone you see everywhere....

    50 USD-100 USD

    $

    2 settimane

    Tempo

    Utile?
    No