Kevin Thomas
banner
mytechnotalent.bsky.social
Kevin Thomas
@mytechnotalent.bsky.social
290 followers 10 following 670 posts
Author of the world’s most popular Reverse Engineering Tutorial
Posts Media Videos Starter Packs
I got a request to make an PURE Assembler driver in RISC-V so here it is. No SDK as it will teach you the basics of a RISC-V chip specifically the ESP32-C3. #Embedded #ReverseEngineering github.com/mytechnotale...
0x000C: RP2350 crt0.S weak .thumb_func ISR stubs (decl_isr_bkpt) vector table exec bkpt #0. Unhandled USER IRQs to __unhandled_user_irq (puts IRQ in r0 via mrs r0, ipsr / subs r0,#16) so bkpt label has exact faulting vector. #Embedded #ReverseEngineering github.com/mytechnotale...
Reposted by Kevin Thomas
Good News, Everyone! We have the official dates for #DEFCON34! And to make up for the delay, we also have the dates for #DEFCON35!

Please join us at the Las Vegas Convention Center August 6-9 in 2026 and August 5-8 in 2027.

Save the dates, friends. It'll be here before you know it.

#defcon
RP2350 deep-dive: XIP vector table @0x10000000 (memmap_default.ld/crt0.S). Word0=__StackTop (SCRATCH_Y: ORIGIN 0x20081000 + LEN 0x1000 = 0x20082000), Word1=reset handler. Bootrom VTOR; ISRs (isr_usagefault @0x10000110) follow. #Embedded #ReverseEngineering github.com/mytechnotale...
Little Halloween fun chillin with Baab about to hear The Last Rewind band.
Learn the basics of #Embedded #ARM #Assembler w/ #RP2350 as here is a simple blinky driver from scratch with no SDK to teach you the basics of how the RP2350 works! #ReverseEngineering github.com/mytechnotale...
0x000A: On the RP2350 boot flow - reset handler checks (cbz r0) core0 cont; other core back to bootrom. Core0 runs crt0.S: copy init data flash→RAM via data_copy_table, zero BSS, call runtime_init (C runtime) then blx main. #Embedded #ReverseEngineering github.com/mytechnotale...
0x0009: The RP2350 uses XIP where firmware executes directly from non-volatile memory rather than being copied into RAM. We notice our MSP is first 4 bytes at flash followed by the Reset_Handler! THIS CAN COME IN HANDY when reversing! #Embedded #ReverseEngineering github.com/mytechnotale...
0x0008: The RP2350 boot2 config QMI for 0x03 serial reads, sets timing (short cooldown, clock div, RX delay), performs a dummy transfer to init flash & enable cont/XIP (prefix_len=0). Ret to bootrom which jmp to reset_vector. #Embedded #ReverseEngineering github.com/mytechnotale...
Reverse Engineering is the single most important skill to protect us from the abstractions of GPT! youtu.be/Yz0zFsp0qzE?...
Reverse Engineering
YouTube video by Kevin Thomas
youtu.be