l
lucid_duck

Lucid Duck

@lucid_duck
4.9(30)

Reverse engineering reality

Canadá
Inglés
Parte de la información aparece en idioma inglés.
Sobre mí
I reverse engineer embedded systems and find the bugs that aren’t supposed to exist. Recent work includes: • Command injection → root shell in enterprise VPN firmware (CVSS 9.8) • D-Bus authentication bypass in IoT security cameras (CVSS 8.8) • Linux kernel wireless driver patches under maintainer review I work directly with stripped binaries, no source code or documentation. I deliver clear reports, PoCs, and remediation guidance Portfolio: https://justthetip.ca Kernel work: https://lore.kernel.org/linux-wireless/?q=lucid_duck%40justthetip.ca GitHub: https://github.com/Lucid-Duck... Lee más

Habilidades

l
lucid_duck
Lucid Duck
desconectado • 
Tiempo medio de respuesta: 2 horas

Revisa mis servicios

Programación y tecnología
I will reverse engineer your binary, protocol, or compiled code
DeUSD 100 / proyectoMás información
Programación y tecnología
I will analyze your device or firmware for security vulnerabilities
DeUSD 100 / proyectoMás información

Porfolio

Experiencia laboral

Vulnerability research and Linux kernel development

Lucid Duck • Trabajador autónomo

Dec 2024 - Present • 1 yr 5 mos

Black-box vulnerability research and Linux kernel development. 5 critical/high findings (CVSS 7.1-9.8) across enterprise products. All work done without source code or vendor documentation. VULNERABILITY RESEARCH: Enterprise VPN Infrastructure: Command injection → root shell (CVSS 9.8) Weaponized legitimate VPN client into exploit delivery by chaining misconfigurations Built rogue IKEv2 servers (StrongSwan) to safely validate exploits prior to disclosure IoT & Embedded Devices: D-Bus authentication bypass in security cameras (CVSS 8.8) Privilege escalation via world-writable Unix socket in endpoint protection software (CVSS 7.1) Firmware extraction and analysis on ARM and x86 embedded Linux platforms Protocol Reverse Engineering: Reconstructed Cap’n Proto IPC protocols from stripped binaries Decoded proprietary XML schemas and binary serialization formats Built custom Python fuzzers to test encrypted message parsers Database Exploitation: SQL injection achieving xp_cmdshell-level system compromise Error-based extraction techniques against Windows SQL Server All findings disclosed via direct vendor contact or Bugcrowd with CVSS scoring, CWE classification, working PoCs, and remediation guidance. LINUX KERNEL DEVELOPMENT: Wireless driver patches submitted to linux-wireless (rtw89, mt76): Fixed TX flow-control bug causing ~200× packet loss in USB drivers Identified race condition in URB completion callbacks and implemented atomic fix Debugged mac80211 TX power reporting issues Patches under maintainer review by Realtek and MediaTek engineers Tools: Ghidra, IDA, GDB, ftrace, Wireshark, Burp Suite, Python, StrongSwan

30 Reseñas
4.9

(29)
(1)
(0)
(0)
(0)
Desglose de calificaciones
  • Nivel de comunicación del Freelancer
    4.9
  • Calidad de la entrega
    4.9
  • Valor de la entrega
    4.9
1-5 de 30 reseñas
Ordenar por
Más relevante
    B

    berg000

    Cliente recurrente

    CH

    Suiza

    5

    Duck is exceptionally professional. He is always there to help us with any copywriting task. He provides valuable insights that help our business move forward day by day. This is our countless orders. The copy he delivered is top-notch. Highly highly recommended. Thank you!

    USD100-USD200

    $

    13 días

    Tiempo

    Útil?
    Sí
    No
    A
    image-docs

    anaxdesign

    MA

    Marruecos

    5

    Great job Lucid. The article was better than expected.

    Hasta USD50

    $

    5 días

    Tiempo

    Útil?
    Sí
    No
    S
    image-docs

    skylr

    US

    Estados Unidos

    4

    Did a great job. Don't be afraid to hire him.... He'll come through for you and deliver what you ask for.

    USD50-USD100

    $

    10 días

    Tiempo

    Útil?
    Sí
    No
    S
    image-docs

    skyrocketblue

    Cliente recurrente

    US

    Estados Unidos

    5

    Great job!

    Hasta USD50

    $

    4 días

    Tiempo

    Útil?
    Sí
    No
    J

    jezabelgr

    DE

    Alemania

    5

    This is the first time I work with Lucid and I was very pleased with the delivery. He rewrote 10 of my blogs that needed a different perspective, transforming them into captivating reads with a unique and funny perspective; something completely different to the standard blogs tone you see everywhere....

    USD50-USD100

    $

    2 semanas

    Tiempo

    Útil?
    Sí
    No