Md Towhidul Ahmed
Practical security research and technical writeups.
Practical security research and technical writeups.
Master's thesis on automated vulnerability detection in OT firmware using YARA signatures, Ghidra reverse engineering, and Control Flow Graph Isomorphism targeting CVE-2015-4590 on STM32 L476RG.
Read WriteupPhysical hardware probing and relay attack against ASSA ABLOY CLIQ mechatronic locks, exploiting the 1-Wire cryptographic protocol with signal capture and forwarding techniques.
Read WriteupGhidra-based static analysis of a stripped ELF binary to recover the serial validation algorithm and implement a working keygen in C, covering decompilation techniques and custom key generation.
Read WriteupWireshark network forensics investigating a phishing-to-C2 kill chain with TLS SNI inspection, TTP correlation, and full MITRE ATT&CK framework mapping of observed attack techniques.
Read Writeup10-year longitudinal capture analysis of SHA-1 MAC and AES-128 stream mode in CLIQ locks, evaluating relay latency budgets and statistical independence of authentication tokens.
Read WriteupInterested in discussing security research, firmware reverse engineering methodologies, or SOC / Blue Team opportunities? Feel free to connect via LinkedIn or GitHub.
Cologne, Germany
Open to opportunities & collaborations