Posts
Creating udev rules for the Bus Pirate 5
·2 mins
Research
Bus Pirate
IoT
Mounting your Bus Pirate 5 to
/dev/buspirate
and /dev/piratebin
.
Ghidra Python3 Scripting Cheatsheet
·2 mins
Research
Reverse-Engineering
Ghidra
Notes on writing python3 scripts for Ghidra.
[NorthSec CTF 2023] - Desk Surveillance Publisher
·10 mins
CTF Writeups
ROP
Autopwn
Angr
Cameras are down. Not the endpoint installing their firmwares. Open socket here. Could analyze some outdated firmwares.
[RITSEC CTF 2023] - Steg as a Service
·10 mins
CTF Writeups
ROP
BinDiff
Can you try exploiting our shady copy of steghide so that we can convince our managers to update the binary?
Deep dive into FSOP
·16 mins
Research
FSOP
Angr
File Stream Oriented Programming (FSOP) is a binary exploitation technique that uses GLIBC file stream structures to gain code execution from memory corruption.
[Real World CTF 5th] - tinyvm
·15 mins
CTF Writeups
VM
FSOP
This is a CTF challenge called TinyVM. The author is very lazy, not wanting to write a description of the challenge, and the code is directly cloned from https://github[.]com/jakogut/tinyvm.
[SecurityFest CTF 2022] - krupt
·10 mins
CTF Writeups
Kernel
Syscalls
The key to r00t is ZcZQndRX or was it DE7NUC6l? Wait, it was r2JLegUE. Eh, you’ll figure it out.
[NorthSec CTF 2022] - Shellcode sandbox
·17 mins
CTF Writeups
Process Injection
Shellcoding
I’ve been told that there’s a service running in our infrastructure used by the API team to offload part of their computations. I have a bad feeling about it! Could you take a look at it and make sure it’s safe? There’s a rumour going around that there’s confidential information in some file named
flag.txt
.
[Real World CTF 4th] - SVME
·5 mins
CTF Writeups
VM
ROP
Professor Terence Parr has taught us how to build a virtual machine. Now it’s time to break it!
[DefCamp CTF 2022] - blinsight
·8 mins
CTF Writeups
Blind PWN
ROP