Hacker News: nullpt_rs

New comment by nullpt_rs in "Show HN: I'm building a browser for reverse engineers"

nullpt_rs — Tue, 07 Oct 2025 23:42:31 +0000

I actually wrote a separate blog post about this! Changing the debugger keyword :) see: https://nullpt.rs/evading-anti-debugging-techniques

New comment by nullpt_rs in "Show HN: I'm building a browser for reverse engineers"

nullpt_rs — Tue, 07 Oct 2025 22:41:47 +0000

D'oh! You are correct :-) Good catch and thanks for teaching me something!

New comment by nullpt_rs in "Show HN: I'm building a browser for reverse engineers"

nullpt_rs — Tue, 07 Oct 2025 20:52:19 +0000

Someone mentioned this as well in another comment. Turns out most of this could’ve been done as an extension after all :-)

edit: actually, wouldn’t you still need to override the global you’d like to instrument? At that point, the toString of the modified function would leak your hook.

see: https://gist.github.com/voidstar0/179990efe918d1028b72f292cf...

Regardless, I do have some interesting ideas that should hopefully make my pain of compiling Chromium for 3 hours worth it though :p

Cheat Engine for site scripts? Who knows. Mostly just using this as an opportunity to learn some browser internals so id say it still paid off :)

New comment by nullpt_rs in "Show HN: I'm building a browser for reverse engineers"

nullpt_rs — Tue, 07 Oct 2025 18:46:39 +0000

Thanks for sharing some examples! Someone shared a similar project in the other thread. I didn’t realize this at the time of writing haha.

FWIW I still think modifying the browser has some positives wrt stealth and hooking out of process frames (could be wrong on the second part, haven’t actually tested!)

Still good to know though will leave a note in the article :-)

New comment by nullpt_rs in "Show HN: I'm building a browser for reverse engineers"

nullpt_rs — Tue, 07 Oct 2025 17:44:12 +0000

Ooh nice, I haven’t seen this project! I actually tried attempting this as an extension at first but wasn’t able to override page window functions. I’m curious to know how they accomplished this. (edit: I see that I missed the chrome.scripting API facepalm)

Thank you for sharing :)

FWIW I still think a custom browser approach has some benefits (stealth and executing in out of process iframes. could be wrong on the second part, haven’t actually tested!)

Show HN: I'm building a browser for reverse engineers

nullpt_rs — Mon, 06 Oct 2025 15:32:32 +0000

Article URL: https://nullpt.rs/reverse-engineering-browser

Comments URL: https://news.ycombinator.com/item?id=45492489

Points: 348

# Comments: 55

Reversing the licensing on a Quantum Scalar i40

nullpt_rs — Thu, 11 Sep 2025 14:04:05 +0000

Article URL: https://blackjack.codes/blog/reversing-the-licensing-on-a-quantum-scalar-i40/

Comments URL: https://news.ycombinator.com/item?id=45211845

Points: 2

# Comments: 0

New comment by nullpt_rs in "Reverse Engineering Vercel's BotID"

nullpt_rs — Mon, 30 Jun 2025 16:11:03 +0000

Sadly, spoofing GPU vendor & renderer can be an even larger flag since they can hash the resulting image of the canvas to compare it with a database of collected fingerprints[0]

[0]: https://research.google/pubs/picasso-lightweight-device-clas...

New comment by nullpt_rs in "Breaking WebAuthn, FIDO2, and Forging Passkeys"

nullpt_rs — Sat, 21 Jun 2025 00:01:47 +0000

"breaking" might've been a strong verb here. updated post title to better reflect the intentions of the post :)

New comment by nullpt_rs in "Cloudflare blocking Pale Moon and other browsers"

nullpt_rs — Tue, 11 Mar 2025 05:34:32 +0000

Most anti-bots will send other browser characteristics as well and can detect if one is lying about which browser, and even which version they're using based on which APIs and properties are/aren't available.

see: https://blog.castle.io/anti-detect-browser-analysis-how-to-d...

New comment by nullpt_rs in "Breaking the 4Chan CAPTCHA"

nullpt_rs — Sat, 30 Nov 2024 06:21:09 +0000

yep, but it can get tricky.

some projects worth checking out: https://github.com/refraction-networking/utls https://github.com/berstend/puppeteer-extra

New comment by nullpt_rs in "Breaking the 4Chan CAPTCHA"

nullpt_rs — Sat, 30 Nov 2024 05:53:08 +0000

I (veritas) run the blog but accept contributions from anyone. The blog itself is open source :-) https://github.com/nullpt-rs/blog

New comment by nullpt_rs in "Ask HN: Happy 404 Day. Whats your favorite 404 error page?"

nullpt_rs — Thu, 04 Apr 2024 13:57:51 +0000

I used to frequent a site titled "The Best 404 Page Ever" that played a random flash file on refresh.

Seems like someone's recreated it here https://thebest404pageeverredux.com/

New comment by nullpt_rs in "The /unblock API from Browserless: dodging bot detection as a service"

nullpt_rs — Wed, 28 Feb 2024 05:56:53 +0000

They have a similar feature labelled "Friendly Bots" https://blog.cloudflare.com/friendly-bots/

New comment by nullpt_rs in "Hacking GTA V RP Servers Using Web Exploitation Techniques"

nullpt_rs — Tue, 29 Aug 2023 23:45:23 +0000

I can sorta share this sentiment. Luckily (for us) tech seems to be moving in the direction of embedding Chromium everywhere which always leads to some fun exploits :)

New comment by nullpt_rs in "Hacking GTA V RP Servers Using Web Exploitation Techniques"

nullpt_rs — Tue, 29 Aug 2023 23:43:25 +0000

Thank you! Hope to publish more like it soon :)

New comment by nullpt_rs in "Evading JavaScript anti-debugging techniques"

nullpt_rs — Tue, 01 Aug 2023 22:56:18 +0000

I knew I forgot to mention something :) I do love this option but I wasn't able to get it to work with this obfuscation technique either.

New comment by nullpt_rs in "Better code highlighting on the web: rehype-tree-sitter"

nullpt_rs — Mon, 24 Jul 2023 21:29:19 +0000

Definitely considering switching over my blog to Astro since I write my posts in MDX and using this plugin to avoid doing this work on the client at all (currently use highlight.js and Next).

Lovely work by my friend Haze :)

New comment by nullpt_rs in "Reverse Engineering TikTok's VM Obfuscation (Part 2)"

nullpt_rs — Mon, 09 Jan 2023 14:50:09 +0000

Nice work. I was going to basically cover the same topics in my second part but it looks like you beat me to it. If you'd like to collaborate with me on the next portion feel free to contact me on Discord (veritas#0001) or email (f@nullpt.rs)

New comment by nullpt_rs in "Devirtualizing nike.com's bot protection"

nullpt_rs — Sat, 07 Jan 2023 20:17:37 +0000

Love these suggestions. Definitely makes dynamic analysis heaps easier. A lot of our blog posts tend to focus on static analysis but it may be worth mentioning these techniques going forward.