This second article talking about reverse engineering the ESP32 Wi-Fi RX registers and showing of the first proof of concept that was able to connect to an access point was posted on the Zeus WPI blog: https://zeus.ugent.be/blog/23-24/esp32-reverse-engineering-continued/