nullpt.rs

nullpt.rs is a collaborative blog where multiple authors publish long-form technical research on reverse engineering and web security. Rather than news or tutorials, it collects detailed case studies drawn from real targets, including CAPTCHA systems, bot protection services, and client-side fingerprinting scripts.

The core content covers JavaScript anti-debugging evasion, WebAuthn and FIDO2 attack surfaces, browser compilation for bypassing anti-bot measures, and exploitation of game server web interfaces. Each article walks through tooling, debugging steps, and the reasoning behind specific bypasses, often with code and screenshots.

Readers who benefit most are security researchers, reverse engineers, and developers working on bot detection or client-side hardening. The material assumes comfort with browser DevTools, JavaScript obfuscation, and low-level debugging, so beginners may find individual posts steeped.

Use the RSS feed or GitHub link to follow new posts, and treat articles as reference material for specific problems rather than sequential reading. The blog is best consumed selectively, picking posts that match your current research target. Overall, it is a niche but valuable archive for offensive and defensive web security work.