Hello, I’m Rehman!

I had $100 in unused Google Cloud credits from my Google One Ultra plan and figured I’d put them toward something interesting. Over the long weekend I ended up building an automated pipeline that scans thousands of Windows kernel drivers for exploitable vulnerabilities, specifically looking for signed ones so they can be loaded without test-signing mode enabled. On its first real run on a massive driver pack, it successfully flagged a zero-day in an ASUS driver. ...

This was discoved with DeepZero Tracked as CVE-2026-13585. ASUS has published a vendor advisory with countermeasures. ASUS ships a kernel driver called bsitf.sys with their Business Manager and Software Manager. It creates a device at \\.\bsitf that requires admin to open. IOCTL 0x222808 takes a size from your input buffer, allocates that much physically contiguous kernel memory, maps it into your process, and gives you back the pointer AND the physical address. There’s no validation on the size, no limit on how many allocations you can make, and no input checking at all. ...

Disclaimer: The following is a technical exploration for educational purposes only. It is not intended to bypass licensing or promote piracy. Sononym is a commercial application, and users should respect its licensing terms. Sononym is a music sample browsing tool that helps producers, sound designers, and musicians quickly search, tag, and organize audio samples. Its smart search features and AI-assisted audio analysis make it a valuable tool for anyone working with large sample libraries. ...

This is a guide on how to have destructible foliage such as in games like Valheim, and Rust. It’s developed with Replication and Multiplayer in mind, and works without spawning any new actors, all handled in InstancedStaticMesh Components and a GameState component. I started with looking at World Partition and PCG to manage this, dividing the world into cells and tracking resource state per cell. While I do use World Partition in my project, I realized this system doesn’t actually need it. Instanced Static Meshes already come with built-in culling and visibility, and layering cell-based state management on top would only add complexity without real performance gains. ...

This is an exhaustive breakdown of the inventory system I built for Mythic, an open-world survival game where players can explore, build, hunt, survive, and more. This system is the backbone of item handling in the game, covering everything from crafting and equipping to multiplayer replication and in-world interactions. Part 1: Core Itemization Concepts 1. Introduction to the Itemization System The goal of this itemization system is to allow for a vast array of loot with varied behaviors and stats, without creating a tangled mess of code. I achieve this through a few key elements: ...

Setup SDL2 for CLion using CMake Setting up SDL2 with CMake for CLion can be a hassle but in this tutorial we are going to solve that. First, open your project and set the default toolchain (found in settings) to the bundled mingw that comes with CLion. Create a cmake/modules directory in your project root. Put the following cmake file in the newly created cmake/modules directory ...

Setup SDL2_image for CLION using CMAKE Guide for setting up SDL2_image for CLION using CMAKE Since setting up SDL2_IMAGE is very similar to setting up SDL2, most of this guide will be very similar to the setup SDL2 for CLION guide. Open your project and set the default toolchain (found in settings) to the bundled mingw that comes with CLion. Create a cmake/modules directory in your project root. ...