#00 [editorial] 2026-02-13
by Leland Flynn (~c0mmrade)
#introduction#meta#editorial

Welcome to terminull

The screen flickers to life. Another terminal, another connection. But this one is different.

You’ve connected to terminull — the hacker e-zine with a classic style and modern content. Built for the terminal and the web alike, by people who still believe in the beauty of the baud. No tracking pixels. No newsletter popups. No sponsored content. Just pure, uncut signal.

HACK

terminull is a space for technical depth, original research, and the hacker ethos that built the internet. No SEO optimization. No engagement metrics. Just the work.

whomai

Actual Self-Portrait of the Author

⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠿⠿⠿⠿⠟⢛⣛⡉⣉⢙⠻⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠿⠛⠩⠭⢑⣂⣠⣴⡵⠦⢠⢤⣅⠍⠋⠟⠲⠆⠀⢹⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⠿⠟⠛⠉⢉⠀⡉⠍⠠⠁⠔⠀⠊⠝⢿⣻⡯⡿⣶⣶⣴⣦⣤⣘⠇⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡟⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⡀⢀⠠⡀⢄⡈⠀⡄⣿⡷⡇⣻⣾⢯⣿⡽⡗⢿⡇⢸⣭⡻⣿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢠⠄⠠⢰⡄⠲⡈⠆⠥⢃⠜⡠⢃⠜⡠⠂⠀⣿⣟⣷⡇⠟⠹⠿⠳⡿⠓⣸⡇⢸⡟⣭⡟⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢸⠠⢁⠣⢌⣱⣴⣿⣿⣿⣦⠑⡌⢢⠑⠂⠀⡿⣯⡟⡇⡥⢖⣂⣐⢬⣯⣿⡇⠘⣥⡛⣏⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢸⢀⢃⡑⢢⣿⡿⡋⠝⣿⣿⣇⡘⠄⠨⡁⠀⣧⣿⠇⡇⣼⣚⡽⢶⢠⣸⣷⡧⠀⠘⣧⢸⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢸⠀⢼⠀⢿⣿⣿⢀⠛⣿⣿⣇⠸⡀⠣⠀⠀⣿⣟⡧⡄⠻⢿⡃⡜⠠⣧⡛⢃⠀⢿⠿⢿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢸⢀⢺⠩⣸⣿⣿⠠⣉⣿⣿⡇⢆⡁⢢⠁⠀⣿⣯⣇⡇⢪⠴⠥⠤⠌⣘⠻⠜⣗⡀⠏⣼⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢸⠐⡸⡇⠸⣿⣷⣤⣼⣿⣿⢉⠦⠄⣂⠁⠀⣿⡷⣿⡇⣘⠘⠓⠲⢐⣂⠀⢽⣟⡃⡈⢿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⠈⠐⡡⢌⠱⡙⢟⢛⡿⢋⠲⠌⠦⡁⠤⠀⠠⡿⣿⡽⡇⡸⡇⠐⠂⡂⢀⠸⢛⣫⣾⣿⡌⢿⣿⣿⣿⣿⣿⣿⣿
⣿⡇⢀⢀⣈⣈⢒⠁⢈⢢⢄⡉⢁⣬⣥⣭⣤⠦⠰⡻⢏⣋⢁⠌⠔⠂⡉⠄⣡⣴⣿⣿⣿⣿⣿⡌⢿⣿⣿⣿⣿⣿⣿
⣿⣧⡠⠀⠤⠍⠉⠙⠉⠓⠒⠒⠒⠒⠉⠉⠁⠀⠀⠀⠈⠐⠂⠀⠐⢠⣤⣾⣿⣿⣿⡿⢿⣿⣿⣿⣌⢿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣶⣶⣶⣶⣶⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠉⠉⠀⠀⠀⠀⢸⣿⣿⣿⣿⣌⢿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠟⠋⠀⠀⠀⠀⠀⠆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠄⠂⢀⠂⢿⣿⣿⣿⣿⣿⢸⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⡿⠋⠁⠀⠀⠀⠀⠀⡀⠀⠀⠈⠀⠀⠀⠀⡀⠀⡀⠰⡈⢌⠰⠀⠁⠀⣾⣿⣿⣿⡿⢡⣾⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⣿⣆⠠⢀⡀⠀⠀⠀⠀⠀⠀⠤⠒⠠⠈⢀⠔⡨⠔⠃⠈⠀⠀⠔⠈⠸⣿⣿⡿⠟⣱⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⣿⣿⣧⡀⠀⡁⠀⢁⠠⠌⡰⢀⠎⢠⠉⢆⠊⠀⠀⠀⠀⠘⠀⠀⡀⣅⠲⣶⣶⣾⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⣿⣿⡿⠃⠀⠐⠀⠀⠀⠀⠄⡁⠈⠠⠉⣀⠠⠐⠉⠀⢀⡠⢄⠲⡱⢌⡒⡸⢿⣿⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⣿⣿⡿⠋⠀⢀⠀⠀⢀⠀⠄⠃⠀⠈⠑⢠⠁⡄⠢⠁⡊⢔⠣⠜⡊⠥⡑⢌⢖⡡⢄⡙⠿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⣿⡿⠋⠀⠀⠀⠠⠄⢈⠂⠀⢀⠠⢀⠢⢁⠆⡈⠔⢁⠎⡜⢌⡘⠤⡑⢢⠑⣊⠦⡓⣌⠲⡱⠈⡙⣿⣿⣿⣿
⣿⣿⣿⣿⠁⠀⠂⢀⠠⠐⡁⠌⠀⢀⠂⢀⠢⡑⣈⠰⡈⢆⠡⢊⠔⢢⠘⠤⡑⠌⢢⠁⠎⠴⡈⢃⠤⢃⠄⠹⣿⣿⣿
⣿⣿⣿⠁⢀⠠⠐⡠⢊⠄⠰⠈⠀⢀⠂⡔⢃⠰⣀⠣⡘⢄⠣⢈⠜⡠⡉⢆⡁⠪⢄⠋⠘⠀⢔⡊⡒⠎⡜⠂⢿⣿⣿
⣿⡟⠁⠐⠀⠀⠂⠑⡌⡌⠁⠀⠐⠈⠂⢰⠈⠒⡄⢣⠘⡄⠃⡌⢢⠑⡌⠐⢠⠑⡌⢠⠁⠊⠀⢰⢱⠛⠈⣥⠈⣿⣿
⡿⠀⠀⠒⠀⠀⠐⠠⠄⢡⠁⠠⠉⠀⠌⢢⠉⢆⠱⡈⢆⠱⢀⠱⡈⠐⡄⠀⢣⠐⢀⠂⠤⠉⡀⠆⣤⢃⡓⡌⡐⢻⣿
⣷⡆⠠⠁⠀⠀⠐⠠⠁⠂⢠⠁⠀⠐⡌⢢⠉⢆⠱⣈⠢⠑⢂⢁⠂⠡⠀⠈⢆⠡⠊⠀⡀⠑⢈⠂⡉⢉⠉⡁⠐⠸⣿
⣿⠁⠐⠀⠀⠀⡀⢁⠂⠀⠄⠀⢆⠱⡈⢆⡉⢆⠱⢀⠢⡉⢦⡈⠄⠁⡀⠈⠆⠀⢀⡑⠠⠐⡀⢂⠐⡀⠂⠄⠂⠐⣿
⡟⠀⡀⠀⠀⠰⡐⠠⠀⠐⢀⡁⠎⡰⢁⠆⡘⢄⠃⠆⡱⢈⠆⡘⠀⠐⠠⠈⠀⡀⠤⡘⠀⡐⠀⢂⠐⠠⠁⠤⠁⠌⣿
⠁⢂⠀⠀⠀⠐⠡⠀⠀⠄⢠⠀⢣⠐⡡⢊⠔⡨⠘⠤⡑⢌⠂⡅⢊⠠⠘⠀⠀⡰⢡⠁⠠⢀⠰⣈⠒⡠⠑⢂⠂⠄⣿
⡇⠠⠀⠀⠀⠠⡑⠀⠀⠐⢢⠁⢀⠣⡐⢡⠊⠔⠡⠂⠰⢈⠆⡄⢡⠀⠀⠀⠀⠁⠂⡈⠄⢂⠠⠀⡔⠡⠃⡀⢃⠀⢿
⡿⠀⠀⠀⠀⠰⡁⠀⠌⡠⢃⡘⡀⢡⠘⠤⡉⠜⡠⢉⠆⡈⠒⡄⠃⠀⠀⠀⠐⡈⢄⡐⢀⠂⠌⡀⢆⠱⢠⠡⢀⠂⢌
⠇⠐⠀⠀⠀⠀⠀⢀⠂⢡⠀⢆⠡⠀⠎⡰⢁⢊⡐⠡⢂⠌⡱⠀⡀⠀⠀⠠⡑⢈⠀⡀⠠⠈⠔⡀⠎⠄⠃⡐⠠⠀⢠

My name is Leland but, you can call me c0mmrade if you’d like. I’m a Security Researcher, Hacker, and semi-professional weirdo. I suppose you could call me a “Technologist” if you wanted to get reductive with your labeling. I’ve worked in the tech space in varying capacities for over 24 years as of this publishing. Technology, Philosophy, Culture, and Justice are some of my deepest passions. Radical Honesty is an imperative for me; an undeniable signal.

I see beauty in the signal. And I intend to maintain it in whatever way I can.

Why Now?

We are digital citizens of the world. We keep us safe. We care about our world. We will make it better. We reject the global panopticon. We will fight it. We believe in truth. We will maintain the signal.

2025 was a year that demanded our attention. And 2026 has brought with it salvo after salvo of truth to power. Though many seem hell-bent on skewing that truth, many more are dedicated to maintaining the signal.

What better place than here? What better time than now?

This is the world we operate in now. It deserves a publication that takes it seriously — and takes itself less seriously.

@mqudsi - We see you, we hear you, and we thank you.

What’s in This Issue

A single deserialization flaw in React Server Components gave every nation-state APT on the planet unauthenticated RCE on half the web. North Korea stole $1.5 billion from a single exchange in an afternoon — then hid their C2 infrastructure on the blockchain where nobody can take it down. Apple’s AirPlay protocol turned out to be a wormable zero-click attack surface hiding in every living room. An AI agent climbed to #1 on HackerOne’s global leaderboard, outperforming thousands of human hackers in a fraction of the time.

And somewhere in all of that, a ransomware gang left their credentials in a directory listing.

Welcome to Volume 01 of terminull.

  • React2Shell — anatomy of a CVSS 10.0 that broke the web’s favorite framework
  • Lazarus vs. Bybit — inside the $1.5 billion crypto heist and the supply chain attack that made it possible
  • EtherHiding — when the blockchain becomes your C2 and nobody can pull the plug
  • AirBorne — 23 vulnerabilities in AirPlay, zero-click wormable RCE in your living room
  • Hunting the Giant Centipede — original Rhysida ransomware research, from IR to FBI coordination
  • Hunting the Giant Centipede: Phase 2 — infrastructure genealogy, malware forensics, and attribution
  • Ghost Tap — NFC relay fraud at scale, from research tool to MaaS platform
  • AI Breaks Crypto — deep learning side-channel attacks on AES and post-quantum schemes
  • XBOW — the AI that beat every hacker on HackerOne
  • Security News Roundup — everything else that mattered in 2025

Each article is written for people who want to understand the how, not just the what. Code blocks have language tags. Exploit chains have diagrams. IOCs are included where appropriate.

How to Navigate

If you’re reading this in a terminal — as intended — you have options:

guest@terminull:~$ help        # show available commands
guest@terminull:~$ read 01     # read article #01
guest@terminull:~$ ls          # list articles in current volume
guest@terminull:~$ search rce  # search across all content
guest@terminull:~$ crt         # toggle CRT scanline effect

Keyboard shortcuts work too: j/k to move through items, number keys for direct selection, Enter to read, ? for the full help overlay.

Over SSH? Connect with ssh terminull.dev -p 2222 for the full BBS experience — Bubble Tea TUI, Glamour-rendered markdown, the works. Thanks @charmcli we truly love your work!

A Note on Ethics

Every technique in this zine is documented for education and defense. We practice responsible disclosure where possible. We do not coweer to bullies. We notify victims when we find them exposed. Article #5 in this issue describes an investigation where we proactively warned 14 organizations and attempted to work with the FBI to stop those responsible — that’s the standard.

WARN

Never use techniques described here against systems you don’t own or have explicit, written authorization to test. Never use you knowledge or skills to harm an innocent. The line between research and evil is drawn by consent.

Get Involved

terminull is an open project. If you have original research, a war story worth telling, art worth displaying, or a tool worth sharing — we want to hear from you. The best zines were always community-driven. The source is on GitHub. The content is markdown. The bar for contribution is having something worth saying.

The cursor blinks. The prompt awaits.

Welcome aboard.

-- c0mmrade