Security Research · Tooling · Reverse Engineering · Education

Don't Trust. Verify.

grepStrength Security builds tools, publishes security research, and creates educational content for reverse engineers. grepStrength Security bridges the gap between governance, risk, and compliance and hands-on technical security.

What We Do
⛓
Security Tool Development
Building open-source tools for scanning malware, detecting IOCs, and assessing third-party software risk.
🔬
Security Research
Reverse engineering malware and commercial software products alike, then publishing detailed analysis (with IOCs and TTPs) and coordinating vulnerability disclosures.
📐
RE Education
Creating training content for reverse engineering malware, including published challenges on Hack The Box.
Credentials
GCTIGICSPCPTSCCSKCCZTTAISE
Latest Research
Security ResearchReverse EngineeringVulnerability Disclosure
CVE-2026-92680: DPAPI Without Entropy in Araxis Merge
Tracked as CVE-2026-92680: Araxis Merge stored server credentials behind a single DPAPI call with no entropy, recoverable in plaintext by any process running as the user. Affected every release from 2011 to 2026.
Supply ChainReverse EngineeringThreat Hunting
If At First You Don't Succeed: How to Find Bad in the Software Supply Chain
Hunting for malicious packages in the software supply chain, and what persistence looks like when the first few passes turn up nothing.
AI SecurityCloudEthical Hacking
Boxing as Code: Fighting Azure to Build an Agentic AI Red Teaming Lab
Building an agentic AI red teaming lab in Azure, infrastructure-as-code, and the fights picked with the platform along the way.