https://www.3lyly0.dev/ar/research/approximate-gcd-explained/ https://cdn.3lyly0.dev/articles/approximate-gcd-explained/hero.webp Approximate GCD Explained: عندما يختبئ الـSecret Prime داخل حسابات عادية https://www.3lyly0.dev/research/approximate-gcd-explained/ https://cdn.3lyly0.dev/articles/approximate-gcd-explained/hero.webp Approximate GCD Explained: When Your Secret Prime Hides in Plain Arithmeti https://www.3lyly0.dev/ar/research/arbitrary-pointer-manipulation-explained/ https://cdn.3lyly0.dev/articles/arbitrary-pointer-manipulation-explained/hero.webp Arbitrary Pointer Manipulation Explained: When Memory-Safe Code Hands You the Keys https://www.3lyly0.dev/research/arbitrary-pointer-manipulation-explained/ https://cdn.3lyly0.dev/articles/arbitrary-pointer-manipulation-explained/hero.webp Arbitrary Pointer Manipulation Explained: When Memory-Safe Code Hands You the Keys https://www.3lyly0.dev/ar/research/blinded-heap-exploitation/ https://cdn.3lyly0.dev/articles/blinded-heap-exploitation/hero.webp Heap Metadata Corruption Explained: عندما تبدأ بايت واحدة بإعادة كتابة قواعد الـAllocator https://www.3lyly0.dev/research/blinded-heap-exploitation/ https://cdn.3lyly0.dev/articles/blinded-heap-exploitation/hero.webp Heap Metadata Corruption Explained: When One Byte Starts Rewriting the Rules https://www.3lyly0.dev/ar/research/broken-authentication/ https://cdn.3lyly0.dev/articles/broken-authentication/hero.webp شرح Broken Authentication: لما نظام الدخول يسرب بياناتك زي المصفاة https://www.3lyly0.dev/research/broken-authentication/ https://cdn.3lyly0.dev/articles/broken-authentication/hero.webp Broken Authentication Explained: When Logins Leak Like a Sieve https://www.3lyly0.dev/ar/research/browser-session-hijacking-explained/ https://cdn.3lyly0.dev/articles/browser-session-hijacking-explained/hero.webp Browser Session Hijacking Explained: لما تسيب مفتاح الشقة للـExtension وتتفاجئ إنك اتسرقت https://www.3lyly0.dev/research/browser-session-hijacking-explained/ https://cdn.3lyly0.dev/articles/browser-session-hijacking-explained/hero.webp Browser Session Hijacking Explained: When the Cookie Walks Out the Front Door https://www.3lyly0.dev/ar/research/client-side-password-validation-explained/ https://cdn.3lyly0.dev/articles/client-side-password-validation-explained/hero.webp Client-Side Password Validation Explained: عندما يبني الـPassword Checker معالجًا صغيرًا لنفسه https://www.3lyly0.dev/research/client-side-password-validation-explained/ https://cdn.3lyly0.dev/articles/client-side-password-validation-explained/hero.webp Client-Side Password Validation Explained: When Your Password Checker Builds Its Own Tiny CPU https://www.3lyly0.dev/research/command-injection/ https://cdn.3lyly0.dev/articles/command-injection/hero.webp Command Injection Explained: When Your Server Becomes the Attacker's Terminal https://www.3lyly0.dev/research/csrf/ https://cdn.3lyly0.dev/articles/csrf/hero.webp CSRF Explained: The Art of Making Users Do Your Bidding Without Their Knowledge https://www.3lyly0.dev/ar/research/encrypted-c2-loader-explained/ https://cdn.3lyly0.dev/articles/encrypted-c2-loader-explained/hero.webp Encrypted C2 Loader Explained: ربط PCAP والذاكرة مع stage مخفي https://www.3lyly0.dev/research/encrypted-c2-loader-explained/ https://cdn.3lyly0.dev/articles/encrypted-c2-loader-explained/hero.webp Encrypted C2 Loader Explained: Correlating PCAP, Memory, and a Hidden Stage https://www.3lyly0.dev/ar/research/flutter-app-reverse-engineering-explained/ https://cdn.3lyly0.dev/articles/flutter-app-reverse-engineering-explained/hero.webp هندسة عكسية لتطبيقات Flutter: لما التشفير يصير غلاف فخامة والباب مفتوح https://www.3lyly0.dev/research/flutter-app-reverse-engineering-explained/ https://cdn.3lyly0.dev/articles/flutter-app-reverse-engineering-explained/hero.webp Flutter App Reverse Engineering Explained: When the Crypto Is Just Fancy Wrapping Paper https://www.3lyly0.dev/ar/research/hybrid-mobile-reward-check-explained/ https://cdn.3lyly0.dev/articles/hybrid-mobile-reward-check-explained/hero.webp Hybrid Mobile Reward Check Explained: لما التطبيق يوزع الجوائز على نفسه https://www.3lyly0.dev/research/hybrid-mobile-reward-check-explained/ https://cdn.3lyly0.dev/articles/hybrid-mobile-reward-check-explained/hero.webp Hybrid Mobile Reward Check Explained: When Four Handoffs Still Mean Yes https://www.3lyly0.dev/ar/research/insecure-deserialization/ https://cdn.3lyly0.dev/articles/insecure-deserialization/hero.webp Insecure Deserialization بالتفصيل: لما بياناتك القديمة بترجعلك تعضك https://www.3lyly0.dev/research/insecure-deserialization/ https://cdn.3lyly0.dev/articles/insecure-deserialization/hero.webp Insecure Deserialization Explained: When Your Data Comes Back to Bite You https://www.3lyly0.dev/ar/research/insecure-opc-ua-write-access-explained/ https://cdn.3lyly0.dev/articles/insecure-opc-ua-write-access-explained/hero.webp صلاحيات الكتابة غير الآمنة في OPC-UA: عندما يكون زر الطوارئ مجرد Boolean على الشبكة https://www.3lyly0.dev/research/insecure-opc-ua-write-access-explained/ https://cdn.3lyly0.dev/articles/insecure-opc-ua-write-access-explained/hero.webp Insecure OPC-UA Write Access Explained: When the Safety Interlock Is Just a Boolean https://www.3lyly0.dev/ar/research/replacement-string-injection-explained/ https://cdn.3lyly0.dev/articles/replacement-string-injection-explained/hero.webp Replacement-String Injection Explained: عندما يسرق `$`` الـTemplate https://www.3lyly0.dev/research/replacement-string-injection-explained/ https://cdn.3lyly0.dev/articles/replacement-string-injection-explained/hero.webp Replacement-String Injection Explained: When `$`` Steals the Template https://www.3lyly0.dev/ar/research/mqtt-debug-topic-leaks-explained/ https://cdn.3lyly0.dev/articles/mqtt-debug-topic-leaks-explained/hero.webp تسريب Debug Topics في MQTT: لما الجهاز يكتب مذكراته ويخليها للكل https://www.3lyly0.dev/research/mqtt-debug-topic-leaks-explained/ https://cdn.3lyly0.dev/articles/mqtt-debug-topic-leaks-explained/hero.webp MQTT Debug Topic Leaks Explained: When Your Device Keeps a Diary Anyone Can Read https://www.3lyly0.dev/ar/research/non-transitive-comparators/ https://cdn.3lyly0.dev/articles/non-transitive-comparators/hero.webp Non-Transitive Comparators Explained: لما الـ Sorting يمشي برا الـ Array بهدوء https://www.3lyly0.dev/research/non-transitive-comparators/ https://cdn.3lyly0.dev/articles/non-transitive-comparators/hero.webp Non-Transitive Comparators Explained: When Sorting Quietly Walks Off the Array https://www.3lyly0.dev/ar/research/obfuscated-state-machine/ https://cdn.3lyly0.dev/articles/obfuscated-state-machine/hero.webp Obfuscated State Machine Explained: لما يتحول الـVerifier إلى متاهة https://www.3lyly0.dev/research/obfuscated-state-machine/ https://cdn.3lyly0.dev/articles/obfuscated-state-machine/hero.webp Obfuscated State Machine Explained: When Your Verifier Turns Into a Maze https://www.3lyly0.dev/research/owasp-top-ten-2025/ https://cdn.3lyly0.dev/articles/owasp-top-ten-2025/hero.webp OWASP Top 10: The Wild World of Web App Security Risks! https://www.3lyly0.dev/research/path-traversal/ https://cdn.3lyly0.dev/articles/path-traversal/hero.webp Path Traversal Explained: The Art of Escaping the Filesystem Prison https://www.3lyly0.dev/ar/research/php-extension-heap-overflow-explained-when-metadata-owns-the-allocator/ https://cdn.3lyly0.dev/articles/php-extension-heap-overflow-explained-when-metadata-owns-the-allocator/hero.webp ثغرة Heap Overflow في امتدادات PHP: عندما تتحكم الـ Metadata في الـ Allocator https://www.3lyly0.dev/research/php-extension-heap-overflow-explained-when-metadata-owns-the-allocator/ https://cdn.3lyly0.dev/articles/php-extension-heap-overflow-explained-when-metadata-owns-the-allocator/hero.webp PHP Extension Heap Overflow Explained: When Metadata Owns the Allocator https://www.3lyly0.dev/ar/research/predictable-quantum-randomness-explained/ https://cdn.3lyly0.dev/articles/predictable-quantum-randomness-explained/hero.webp العشوائية الكمومية المتوقعة: لما الـ Beacon اللي يدعي الاستقلال عن الجهاز يكون مجرد Hash function بزي رسمي https://www.3lyly0.dev/research/predictable-quantum-randomness-explained/ https://cdn.3lyly0.dev/articles/predictable-quantum-randomness-explained/hero.webp Predictable Quantum Randomness Explained: When Your Device-Independent Beacon Is Just a Fancy Hash Function https://www.3lyly0.dev/ar/research/prng-stream-reuse-explained/ https://cdn.3lyly0.dev/articles/prng-stream-reuse-explained/hero.webp PRNG Stream Reuse Explained: عندما تعيد العشوائية استخدام نفسها https://www.3lyly0.dev/research/prng-stream-reuse-explained/ https://cdn.3lyly0.dev/articles/prng-stream-reuse-explained/hero.webp PRNG Stream Reuse Explained: When Randomness Repeats Itself https://www.3lyly0.dev/ar/research/rend-asunder-explained/ https://cdn.3lyly0.dev/articles/rend-asunder-explained/hero.webp Rend Asunder Explained: لما المتصفح نفسه يبقى ملعبك والـ Screenshot يبقى قناة الإخراج الوحيدة https://www.3lyly0.dev/research/rend-asunder-explained/ https://cdn.3lyly0.dev/articles/rend-asunder-explained/hero.webp Rend Asunder Explained: When the Browser Itself Becomes Your Playground and the Screenshot Is the Only Output Channel https://www.3lyly0.dev/ar/research/rf-protocol-reverse-engineering-explained/ https://cdn.3lyly0.dev/articles/rf-protocol-reverse-engineering-explained/hero.webp هندسة عكسية لبروتوكول RF: لما الموجات الراديوية تفضح المفاتيح https://www.3lyly0.dev/research/rf-protocol-reverse-engineering-explained/ https://cdn.3lyly0.dev/articles/rf-protocol-reverse-engineering-explained/hero.webp RF Protocol Reverse Engineering Explained: When the Airwaves Leak the Keys https://www.3lyly0.dev/ar/research/safestack-bypass/ https://cdn.3lyly0.dev/articles/safestack-bypass/hero.webp شرح تجاوز SafeStack: الخزنة حديد، بس الكراسة في الصالة https://www.3lyly0.dev/research/safestack-bypass/ https://cdn.3lyly0.dev/articles/safestack-bypass/hero.webp SafeStack Bypass Explained: The Vault Is Solid, the Ledger Isn't https://www.3lyly0.dev/ar/research/sha256-sha384-type-confusion-oob-write-explained/ https://cdn.3lyly0.dev/articles/sha256-sha384-type-confusion-oob-write-explained/hero.webp SHA-256/SHA-384 Type Confusion OOB Write Explained: حين يكذب struct على عمره يُصدِّقه الكيرنل https://www.3lyly0.dev/research/sha256-sha384-type-confusion-oob-write-explained/ https://cdn.3lyly0.dev/articles/sha256-sha384-type-confusion-oob-write-explained/hero.webp SHA-256/SHA-384 Type Confusion OOB Write Explained: When a struct Lies About Its Age, the Kernel Believes It https://www.3lyly0.dev/ar/research/side-channel-ecdsa-explained/ https://cdn.3lyly0.dev/articles/side-channel-ecdsa-explained/hero.webp Side-Channel ECDSA: لماذا خوارزمية القسمة ما تقدر تخبي سرّك https://www.3lyly0.dev/research/side-channel-ecdsa-explained/ https://cdn.3lyly0.dev/articles/side-channel-ecdsa-explained/hero.webp Side-Channel ECDSA Explained: When Your Division Algorithm Can't Keep a Secret https://www.3lyly0.dev/research/sql-injection/ https://cdn.3lyly0.dev/articles/sql-injection/hero.webp SQL Injection Explained: The Bobby Tables Hall of Fame https://www.3lyly0.dev/research/stuxnet-nuclear-hack/ https://www.3lyly0.dev/images/stuxnet/stuxnet-cover.png How to Hack an Iranian Nuclear Plant (A Lazy Hacker's Guide) https://www.3lyly0.dev/ar/research/upnp-command-injection-explained/ https://cdn.3lyly0.dev/articles/upnp-command-injection-explained/hero.webp UPnP Command Injection مشروح: لما الراوتر يثق بالشبكة زيادة عن اللزوم https://www.3lyly0.dev/research/upnp-command-injection-explained/ https://cdn.3lyly0.dev/articles/upnp-command-injection-explained/hero.webp UPnP Command Injection Explained: When Your Gateway Trusts the Network Too Much https://www.3lyly0.dev/research/xss/ https://cdn.3lyly0.dev/articles/xss/hero.webp XSS Explained: When Your Website Becomes a Puppet Show