Anvil Secure Blog
anvilsecure.com · Company blog · on HN since 2021
Anvil Secure is a security consultancy whose blog covers vulnerability research, networking attacks, embedded device hacking and Linux techniques.
What HN saysHN links it for technical security write-ups such as DHCP attacks on routers and running binaries directly from Python memory.
18HN people shared it
3linked it in comments
24stories submitted
174story points
3 months agolast shared
2021people per year2026
Most-shared posts
- 1DHCP Games with Smart Router Devices4 people · 57 points · first shared 2021 · 6 comments on HN
- 2Userland Execution of Binaries Directly from Python4 people · 7 points · first shared 2022 · discussion on HN
- 3Scanning for Post-Quantum Cryptographic Support2 people · 4 points · first shared 2025 · discussion on HN
- 4Compromising Garmin Watches: Deep Dive into GarminOS and MonkeyC Virtual Machine2 people · 4 points · first shared 2023 · discussion on HN
- 5Spoofing Internal Packets for Multihomed Linux Devices2 people · 4 points · first shared 2024 · discussion on HN
- 6One Bug Wasn't Enough: Escalating Twice Through SAP's Setuid Landscape1 people · 73 points · first shared 2025 · 9 comments on HN
- 7Glitching STM32 Read Out Protection1 people · 6 points · first shared 2025 · discussion on HN
- 8Silly proof of concept: Anti-phishing using perceptual hashing algorithms1 people · 5 points · first shared 2022 · 1 comments on HN
- 9HANAlyzer: An Open-Source Tool to Secure Your HANA Databases1 people · 4 points · first shared 2025 · discussion on HN
- 10How We Test AI: LLM and GenAI Security Methodology at Anvil Secure1 people · 3 points · first shared 2026 · discussion on HN
- 11Exploiting AQL Injection Vulnerabilities in ArangoDB1 people · 2 points · first shared 2026 · discussion on HN
- 12Locked Up but Not Locked Out: iOS App Pentesting Without Jailbreak1 people · 1 points · first shared 2026 · discussion on HN
- 13Bug Hunting: How We Discovered New Issues in CD Projekt Red's Gaming Platform1 people · 1 points · first shared 2024 · discussion on HN
- 14Breaking Sapcar: Four Local Privilege Escalation Bugs in SAR Archive Parsing1 people · 1 points · first shared 2025 · discussion on HN
- 15Passkey Editor: A Burp Suite Extension for Attacking WebAuthn1 people · 1 points · first shared 2026 · discussion on HN
What HN people wrote when they linked it
icehawk · 2025-02-17
Only if you trust your ISP:
https://www.anvilsecure.com/blog/dhcp-games-with-smart-router-devices.…
t819291 · 2024-01-03
Oldie but goodie. I wrote a more modern Python-only version which you can find at: https://www.anvilsecure.com/blog/userland-execution-of-binaries-direct…
ohwutwathere · 2022-11-03
You can. Different ways to skin the cat and the memfd trick works fine. However there are other ways of doing it and being more stealthy.
See for example https://www.anvilsecure.com/blog/userland-execution-of-binaries-direct… The implementation is on GitHub and rather clean if I may say so myself (am the author).