Topic guides

Choose a question rather than a publication date. These paths connect the four current articles; they are not complete courses.

What is inside a compiled application?

Start with extracting embedded files from a compiled Deno binary. It follows the embedded virtual filesystem and a patch that invokes extraction in Deno 2.7.0 Windows executables. Keep the distinction between recovering embedded files and recovering the original application source: the method does not promise both.

Then read the Vintage Story Creative-state article below for a different kind of inspection: following managed code and changing runtime behavior rather than extracting packaged files.

Where does a game trust its client?

Read these in order:

  1. Vintage Story local Creative state introduces decompilation and Harmony patches. Watch which UI and movement changes are local, and which actions still depend on server permissions. The snippets are not a complete project.
  2. Vintage Story coordinates and teleportation moves to position packets and server validation. Compare the client’s ability to report a position with the server’s responsibility to check it. The findings concern the examined v1.21.6 behavior, not every server configuration.

Use singleplayer, your own server, or a server whose owner has authorized testing.

Can a working service still leak data?

Read RabbitMQ message confidentiality. The receive–read–requeue sequence explains why successful processing does not prove a message stayed private. Start with the access prerequisites: the consumer already needs permission to read the queue. This is neither an authentication bypass nor a network MITM attack.

Compare it with the game articles: in both cases, ask what the system permits a connected client to do, rather than treating a working connection as proof of safety.

Code and context

The projects page is the next stop for code projects; consult each repository for its own setup and scope. About Belz explains the blog’s interests and the limits of these write-ups.