{"generator":"Jekyll","link":[{"@attributes":{"href":"https:\/\/tfll37.github.io\/feed.xml","rel":"self","type":"application\/atom+xml"}},{"@attributes":{"href":"https:\/\/tfll37.github.io\/","rel":"alternate","type":"text\/html"}}],"updated":"2026-07-09T21:25:40+02:00","id":"https:\/\/tfll37.github.io\/feed.xml","title":"Capital TFLL37","subtitle":"Cybersecurity research blog focusing on malware analysis, reverse engineering, CTF writeups, and vulnerability research by TFLL37.","author":{"name":"TFLL37"},"entry":[{"title":"Reverse Engineering the Intel NPU Windows Driver - An MCDM Miniport Architecture Map","link":{"@attributes":{"href":"https:\/\/tfll37.github.io\/posts\/Reverse-Engineering-the-Intel-NPU-Windows-Driver-An-MCDM-Miniport-Architecture-Map\/","rel":"alternate","type":"text\/html","title":"Reverse Engineering the Intel NPU Windows Driver - An MCDM Miniport Architecture Map"}},"published":"2026-05-31T17:01:00+02:00","updated":"2026-05-31T16:32:50+02:00","id":"https:\/\/tfll37.github.io\/posts\/Reverse%20Engineering%20the%20Intel%20NPU%20Windows%20Driver%20An%20MCDM%20Miniport%20Architecture%20Map","content":{"@attributes":{"type":"html"}},"author":{"name":"TFLL37"},"category":[{"@attributes":{"term":"Vulnerability Research"}},{"@attributes":{"term":"Reverse Engineering"}},{"@attributes":{"term":"Drivers"}},{"@attributes":{"term":"binary-analysis"}},{"@attributes":{"term":"defense"}},{"@attributes":{"term":"windows"}},{"@attributes":{"term":"intel"}},{"@attributes":{"term":"NPU-chips"}}],"summary":{"@attributes":{"type":"html"}}},{"title":"Project UNDERTOW - The Math Behind Calculating Priority Score for Manual Reverse Engineering","link":{"@attributes":{"href":"https:\/\/tfll37.github.io\/posts\/UNDERTOW-Math\/","rel":"alternate","type":"text\/html","title":"Project UNDERTOW - The Math Behind Calculating Priority Score for Manual Reverse Engineering"}},"published":"2026-05-21T16:01:00+02:00","updated":"2026-05-31T15:57:15+02:00","id":"https:\/\/tfll37.github.io\/posts\/UNDERTOW-Math","content":{"@attributes":{"type":"html"}},"author":{"name":"TFLL37"},"category":[{"@attributes":{"term":"Vulnerability Research"}},{"@attributes":{"term":"Reverse Engineering"}},{"@attributes":{"term":"Tools"}},{"@attributes":{"term":"Pipelines"}},{"@attributes":{"term":"nvidia"}},{"@attributes":{"term":"dll-hijacking"}},{"@attributes":{"term":"binary-analysis"}},{"@attributes":{"term":"tooling"}},{"@attributes":{"term":"pipelines"}},{"@attributes":{"term":"defense"}}],"summary":{"@attributes":{"type":"html"}}},{"title":"CVE-2025-23297: NVIDIA FrameView SDK Privilege Escalation Analysis","link":{"@attributes":{"href":"https:\/\/tfll37.github.io\/posts\/cve-2025-23297-nvidia-frameview-privilege-escalation\/","rel":"alternate","type":"text\/html","title":"CVE-2025-23297: NVIDIA FrameView SDK Privilege Escalation Analysis"}},"published":"2025-10-09T19:00:00+02:00","updated":"2025-12-24T18:30:34+01:00","id":"https:\/\/tfll37.github.io\/posts\/cve-2025-23297-nvidia-frameview-privilege-escalation","content":{"@attributes":{"type":"html"}},"author":{"name":"TFLL37"},"category":[{"@attributes":{"term":"Vulnerability Research"}},{"@attributes":{"term":"Reverse Engineering"}},{"@attributes":{"term":"cve"}},{"@attributes":{"term":"nvidia"}},{"@attributes":{"term":"privilege-escalation"}},{"@attributes":{"term":"dll-hijacking"}},{"@attributes":{"term":"ghidra"}},{"@attributes":{"term":"windows"}}],"summary":{"@attributes":{"type":"html"}}},{"title":"Dissecting CVE-2025-23278: An In-Depth Journey into NVIDIA Kernel Driver Exploitation","link":{"@attributes":{"href":"https:\/\/tfll37.github.io\/posts\/dissecting-cve-2025-23278-nvidia-kernel-driver-exploitation\/","rel":"alternate","type":"text\/html","title":"Dissecting CVE-2025-23278: An In-Depth Journey into NVIDIA Kernel Driver Exploitation"}},"published":"2025-10-01T19:00:00+02:00","updated":"2025-12-24T18:11:54+01:00","id":"https:\/\/tfll37.github.io\/posts\/dissecting-cve-2025-23278-nvidia-kernel-driver-exploitation","content":{"@attributes":{"type":"html"}},"author":{"name":"TFLL37"},"category":[{"@attributes":{"term":"Vulnerability Research"}},{"@attributes":{"term":"Reverse Engineering"}},{"@attributes":{"term":"cve"}},{"@attributes":{"term":"nvidia"}},{"@attributes":{"term":"kernel-driver"}},{"@attributes":{"term":"reverse-engineering"}},{"@attributes":{"term":"ghidra"}},{"@attributes":{"term":"speakeasy"}},{"@attributes":{"term":"exploitation"}},{"@attributes":{"term":"windows"}}],"summary":{"@attributes":{"type":"html"}}}]}