It's been a while, huh? Anyway - two new posts (and pretty cool ones, so hopefully you'd like them :)

First up: writeup for my SASCTF'25 Finals A/D challenge - BPF-style symbolic verification of bare-metal RISC-V using Triton, a custom QEMU machine, and 5 bugs hidden across the stack. From verifier bypasses to a full QEMU escape 🔑

Gatekeeper: Triton-Powered BPF for RISC-V (SASCTF'25 Finals)

And if you're into ARM TrustZone - a walkthrough of exploiting both a Trusted Application and the OP-TEE kernel itself:

Trust Issues & Broken Trust: OP-TEE Exploitation (SASCTF'25 Quals)