Skip to content
View shlomi-k-avidan's full-sized avatar

Block or report shlomi-k-avidan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
shlomi-k-avidan/README.md

Shlomi Avidan

Embedded & Firmware Engineer | Cyber Security | M.Sc. ECE, VLSI/RFIC @ Ben-Gurion University

Currently: independent security research on a D-Link DSL-224 xDSL gateway — UART root shell, bit-exact 8 MB SPI flash dump, SquashFS carving, MIPS httpd analysis in Ghidra.

Selected work

  • D-Link DSL-224 hardware security research — Firmware extraction and vulnerability research on a Realtek-based DSL router. UART root shell (baud measured on an oscilloscope, console via a bit-banged ESP8266 bridge), md5-verified 8 MB SPI flash dump over nc, SquashFS rootfs carving, static analysis of the MIPS web stack in Ghidra, on-target debugging with a cross-compiled big-endian MIPS gdbserver. In progress.
  • Blind HID Injector — ADB enablement on a dead-display Android — Raspberry Pi Pico (CircuitPython) presenting as a composite USB HID device that blindly drives the Android UI to enable USB Debugging on a Pixel 6 with a dead screen. Relative-to-absolute pointer calibration by corner-slamming, deterministic keyboard focus traversal, and an honest write-up of where the technique hits its observability limit.
  • Check Point Security Academy CTF writeup — Reverse-engineered a custom network protocol from packet captures, recovered the XOR key of a challenge-response scheme, and built a working exploit past a CRC-32 integrity check. Also MITM via ARP spoofing with RC4 key recovery, plus cryptography, forensics, and steganography.
  • CEE-Masters — Graduate technical work in semiconductor devices and nanophotonics, including an independent reproduction and critique of a Science paper on dielectric metasurfaces (with my own MATLAB simulations) and first-principles reviews of solar-cell physics.
  • BGU remittance automator — Multi-stage Python pipeline written by hand in 2022 that replaced a full-time manual data-processing role: cleaning and validating messy monthly financial spreadsheets, resolving donor IDs, driving records into a Salesforce CRM. Backed by a formal recommendation letter from the division CFO.
  • Arduino Nano SDI-12 → USB bridge — Interface between an Arduino Nano (ATmega328P) and a Stevens HydraProbe soil sensor over the SDI-12 protocol, with a clean parser and full documentation.

Achievements: 1st place (solo, out of 69 teams) — Iron Codes CTF, Tel Aviv University CyberWeek 2024 · HackTheBox rank #1,026 globally (July 2026) s4ma3l

Contact: LinkedIn · shlomika99@gmail.com

Legacy Projects: BGU scanned-exam downloader — student-era tool that retrieved your own scanned exams before official publication by reconstructing the download token (release gate existed only in the UI; since fixed by the university).

Pinned Loading

  1. dsl-224-research dsl-224-research Public

    Ongoing embedded security research on a D-Link DSL-224 xDSL gateway. The goal is to reach a root shell, extract a bit-exact firmware image, and analyze the platform for vulnerabilities.

    Python

  2. pixel-6_recovery_HID_Injector pixel-6_recovery_HID_Injector Public

    A Raspberry Pi Pico running CircuitPython, presenting as a composite USB HID device (keyboard + mouse), that blindly navigates the Android UI to enable USB Debugging with no working screen on the t…

    Python

  3. CEE-Masters CEE-Masters Public

    Graduate technical work from my M.Sc. in Computer and Electrical Engineering at Ben-Gurion University of the Negev. My specialization is RF integrated circuits, nanotechnology, and VLSI; these work…

    MATLAB

  4. bgu-remittance-automator bgu-remittance-automator Public

    A multi-stage automation pipeline I built in 2022 for the development office at Ben-Gurion University. It processes the monthly donation-remittance spreadsheets sent by the Canadian and American as…

    Python

  5. ctf-writeups ctf-writeups Public

    Writeups from cybersecurity competitions I have solved, covering reverse engineering, protocol exploitation, binary and cryptographic attacks, network attacks, forensics, and steganography.

    JavaScript

  6. ultimate-lifeform_gmod-addon ultimate-lifeform_gmod-addon Public

    A Garry's Mod weapon (SWEP) written in Lua, published on the Steam Workshop. It turns the player into an over-the-top "ultimate lifeform" with a roster of scripted abilities: laser eyes, a time-sto…

    Lua