Browse categories
Explore
Fiverr Pro
English
$
USD
Lucid Duck
@lucid_duck
Reverse engineering reality
Canada
English
About me
I reverse engineer embedded systems and find the bugs that aren’t supposed to exist.
Recent work includes:
• Command injection → root shell in enterprise VPN firmware (CVSS 9.8)
• D-Bus authentication bypass in IoT security cameras (CVSS 8.8)
• Linux kernel wireless driver patches under maintainer review
I work directly with stripped binaries, no source code or documentation.
I deliver clear reports, PoCs, and remediation guidance
Portfolio: https://justthetip.ca
Kernel work: https://lore.kernel.org/linux-wireless/?q=lucid_duck%40justthetip.ca
GitHub: https://github.com/Lucid-Duck
Skills
Lucid Duck
Offline •
Average response time: 2 hours
See my services
Programming & Tech
I will reverse engineer your binary, protocol, or compiled code
Programming & Tech
I will analyze your device or firmware for security vulnerabilities
Portfolio
Work experience
Vulnerability research and Linux kernel development
Lucid Duck • Self-employed
Dec 2024 - Present • 1 yr 5 mos
Black-box vulnerability research and Linux kernel development. 5 critical/high findings (CVSS 7.1-9.8) across enterprise products. All work done without source code or vendor documentation. VULNERABILITY RESEARCH: Enterprise VPN Infrastructure: Command injection → root shell (CVSS 9.8) Weaponized legitimate VPN client into exploit delivery by chaining misconfigurations Built rogue IKEv2 servers (StrongSwan) to safely validate exploits prior to disclosure IoT & Embedded Devices: D-Bus authentication bypass in security cameras (CVSS 8.8) Privilege escalation via world-writable Unix socket in endpoint protection software (CVSS 7.1) Firmware extraction and analysis on ARM and x86 embedded Linux platforms Protocol Reverse Engineering: Reconstructed Cap’n Proto IPC protocols from stripped binaries Decoded proprietary XML schemas and binary serialization formats Built custom Python fuzzers to test encrypted message parsers Database Exploitation: SQL injection achieving xp_cmdshell-level system compromise Error-based extraction techniques against Windows SQL Server All findings disclosed via direct vendor contact or Bugcrowd with CVSS scoring, CWE classification, working PoCs, and remediation guidance. LINUX KERNEL DEVELOPMENT: Wireless driver patches submitted to linux-wireless (rtw89, mt76): Fixed TX flow-control bug causing ~200× packet loss in USB drivers Identified race condition in URB completion callbacks and implemented atomic fix Debugged mac80211 TX power reporting issues Patches under maintainer review by Realtek and MediaTek engineers Tools: Ghidra, IDA, GDB, ftrace, Wireshark, Burp Suite, Python, StrongSwan
30 Reviews
| (29) | ||
| (1) | ||
| (0) | ||
| (0) | ||
| (0) |
Rating Breakdown
- Seller communication level
- Quality of delivery
- Value of delivery
1-5 out of 30 Reviews
Sort By
Most relevant
berg000
Repeat Client
Switzerland
Duck is exceptionally professional. He is always there to help us with any copywriting task. He provides valuable insights that help our business move forward day by day. This is our countless orders. The copy he delivered is top-notch. Highly highly recommended. Thank you!
$100-$200
Price
13 days
Duration
Helpful?
anaxdesign
Morocco
Great job Lucid. The article was better than expected.
Up to $50
Price
5 days
Duration
Helpful?
skylr
United States
Did a great job. Don't be afraid to hire him.... He'll come through for you and deliver what you ask for.
$50-$100
Price
10 days
Duration
Helpful?
skyrocketblue
Repeat Client
United States
Great job!
Up to $50
Price
4 days
Duration
Helpful?
jezabelgr
Germany
This is the first time I work with Lucid and I was very pleased with the delivery. He rewrote 10 of my blogs that needed a different perspective, transforming them into captivating reads with a unique and funny perspective; something completely different to the standard blogs tone you see everywhere....
$50-$100
Price
2 weeks
Duration
Seller's Response
Helpful?
