KD8CEC Amateur Radio

TL;DR: Node2Shell ( CVE-2026-111497 ) is a critical unauthenticated remote code execution weakness in the Express Brotli handling path. In a controlled lab demo, the impact progresses from a simple probe all the way to an interactive reverse shell in the application process context. Patch now — upgrade the Node.js / Express stack, rebuild images, and restart every worker so no vulnerable process keeps serving traffic. ⚠ Security notice: This post is for defensive awareness only . All demos were run in an isolated lab against a disposable target I own and control. This article contains no payloads, no exploit code, and no tooling for download . Do not probe systems you do not own or lack explicit permission to test. Watch the lab demo I recorded a short proof-of-concept walkthrough (English captions, role cards for Probe → RCE → Reverse Shell → Post-exploit, lab-only): ▶ Node2Shell (CVE-2026-111497): Express Brotli RCE to a Reverse Shell https://www.youtube.com/watch?v=...

TL;DR: PHP2Shell ( CVE-2026-109618 , CVE-2026-109619 ) is a pair of critical remote code execution flaws in the PHP core (CVSS 9.2). In lab testing, the issue is not a narrow “one-off bug” — under the right conditions it can be driven from a simple code-execution check all the way to a reverse shell. Patch now. There is no complete mitigation other than updating. ⚠ Security notice: This post is for defensive awareness only. All demos were run in an isolated lab against a local containerized target. Do not probe systems you do not own. Watch the lab demo I recorded a short proof-of-concept walkthrough (English captions, lab-only): ▶ PHP2Shell RCE PoC — From Fatal Error to Reverse Shell https://www.youtube.com/watch?v=1D9i6-tUxaI Demo intro: patch immediately · isolated lab only What is PHP2Shell? On 21 October 2026 , the PHP project published a security advisory for two critical RCE vulnerabilities nicknamed PHP2Shell...

NeuroSDR user manual (3) — Sub VFO, satellite, digital voice, Smart Record, web remote Advanced workflows. The Sub VFO / multi-FT8 story assumes hardware with enough instantaneous bandwidth. Author: KD8CEC . 1. Sub VFOs on wide hardware (founding goal) A Sub VFO is an independent virtual receiver inside the RF capture window. On an RSP (or other wide source), you can: Listen to shortwave or CW on MAIN Run FT8 plugins on SUB1 / SUB2 / SUB3 at 14.074, 7.074, 7.040 MHz, … See decoded callsigns on the main waterfall when MAIN WF overlay is enabled If a Sub VFO leaves the capture, the UI shows OUT OF RANGE — raise sample rate / recenter, or accept that the decoder pauses. YouTube: RSP1 bandwidth + Sub VFOs + multi FT8 — full episode YouTube: Create Sub VFOs — 02:42 YouTube: Background FT8 while listening — 03:34 YouTube: OUT OF RANGE — 04:54 YouTube: 7.040 JA FT8 on Sub VFO — 11:38 Virtual Kiwi/WebSDR audio bandwidth is much narrower than a multi-MS/s RSP...

NeuroSDR user manual (2) — NeuroCaption and AF plugins Plugins attach to demodulated audio (or IQ) from your receiver. They are most powerful on local hardware with a stable sample stream; they also work on Virtual Kiwi/WebSDR when you use that secondary path. Author: KD8CEC . 1. Mental model SET → AF Plugins → add a row → choose type → assign VFO ( main or a Sub VFO) → APPLY. Each SCENE owns its plugin instance list. Decoder UIs appear as tabs on the right (FT8, CW, Caption, …). YouTube: AF plugins & captions intro — 03:36 2. NeuroCaption engines Engine Use when Notes ONNX / Sherpa Whisper (Tiny/Base/Small) Offline PC Download INT8 model files; Base/Small cost more CPU than Tiny Groq API Fast cloud STT API key in Caption SETUP Self-hosted Whisper Your GPU box Host/port in Caption SETUP YouTube: ONNX local — 04:07 YouTube: Translation (MyMemory) — 05:20 YouTube: Groq — 09:12 YouTube: Self-hosted Whisper — 12:16 YouTube: Tiny/Base/Small choi...

NeuroSDR user manual (1) — Main window and everyday RX Everyday operation with a local SDR (or a remote source if that is all you have). Author: KD8CEC . Main window — RX CONTROL, AF plugin tabs, RF spectrum/waterfall. YouTube: Device selection & display — 00:11 YouTube: Tuning shortcuts — 00:40 1. Choose SOURCE, then RX START In SOURCE , pick your hardware (SDRplay, RTL-SDR, HackRF, Airspy, …). Virtual Kiwi/WebSDR/OpenWebRX only if you are using the secondary Internet path. Press RX START . The button becomes RX STOP while running. Watch RF/AF meters and the status line for drops / underruns on hardware. 2. RX CONTROL Frequency digits — Click a digit, wheel to change that decade; or enter a frequency and commit. RF GAIN — Hardware gain where the source supports it. SET — NeuroSDR SETUP (Plugin / Audio / AF Plugins / IQ Plugins / General / RF / Performance). SCENE — SAVE / NEW / DEL named layouts (plugins + Sub VFOs + view travel with the scene). M...

NeuroSDR — Download and install for real SDR hardware This guide is for people who download a release and run NeuroSDR on Windows with a dongle or RSP. Author: KD8CEC . Repo install text (English + KO/JA/ZH): INSTALL.md . 1. Get the software Open GitHub Releases (not the green Code zip on the repo home page). Download the newest Windows x64 asset (example: NeuroSDR-v0.2-win-x64.zip ). Extract everything to a writable folder (e.g. C:\NeuroSDR ). Run NeuroSDR.exe . Old Zadig builds break RTL-SDR on modern Windows. Always use the latest Zadig when you need WinUSB. 2. What the zip already contains NeuroSDR.exe and supporting runtime files for that package Bundled native helpers for common USB SDRs (RTL-SDR, HackRF, Airspy, …) under paths such as native\ Built-in AF / IQ plugins You normally do not download extra librtlsdr DLLs for those sticks beyond the release folder. 3. Main hardware path (this is the product) Hardware SOURCE name (typical) What you inst...

NeuroSDR — What it is (hardware SDR first, AI where it helps) Hello. This is KD8CEC . NeuroSDR is a Windows software-defined radio receiver . The primary job is simple to state and hard to do well: take IQ from a real SDR, show a usable spectrum/waterfall, demodulate cleanly, and keep decoding plugins running while you still listen. I publish release zips so most people never compile anything: NeuroSDR Releases . NeuroSDR main window — local or discovered hardware appears under SOURCE; RX START runs the receiver. How to read this series: NeuroSDR is a hardware SDR application . SDRplay, RTL-SDR, HackRF, Airspy / Airspy HF+, SoapySDR devices, and rtl_tcp are the main path. Virtual WebSDR / KiwiSDR / OpenWebRX sources exist as a convenience when you have no dongle or want a public remote site — they are secondary , not the product definition. 1. Why I built it this way There are already good SDR programs. What I wanted on my desk was: Wide capture + many receivers at ...

C-Board firmware downloads are now available on GitHub. C-Board is the external DSP board I built for UV-K5 (and compatible radios) to extend digital features such as FT8 receive, APRS receive/decode, GPS-assisted functions, and related experiments. Hardware introduction (previous post): C-BOARD (DSP-Board) for UV-K5 Repository github.com/phdlee/cboard-uvk5 Release package: v0.32 What is in v0.32 cboard_v032.uf2 — C-Board firmware (RP2040) cec0.3P.packed.bin — companion UV-K5 / UV-5R Plus firmware cboard_v0.32.zip — packaged set + original notes Download v0.32 Why this is public now Earlier builds were shared only with beta testers. After that, many people asked for the firmware by email. I was not checking that mailbox regularly, so I could not send copies to everyone who asked. Publishing the last beta package on GitHub R...

The CEC UV-K5 firmware source is now available on GitHub. When this project began, the plan was simple: ship binaries while the firmware was still moving quickly, then open the full tree at version 1.0. That milestone never quite arrived on schedule ??so rather than keep waiting for a ?쐏erfect??release, I am opening the source now. A short note on the delay School lectures and other projects kept me busy for a long time. I also had many earlier projects still in progress ??including other open-source work ??so picking this firmware tree back up was not easy. With recent AI tooling available, I finally used that help to organize and upload the complete source. Repository github.com/phdlee/uvk5cec Mainline CEC_0.3V 쨌 HF / SI4732 tree in hf-si4732/ 쨌 Releases 쨌 Issue tracker Source repository on GitHub What you will find Mainline CEC firmware source ( CEC_0.3...