section

Writeups

380 posts
rev

Spooky License

Linux

Spooky License: reverse the validation logic, model the transform, and recover the accepted input.

mobile

FastJson and Furious

Android

FastJson and Furious: inspect the Android app, trace the validation path, and recover the flag.

rev

ChromeMiner

Linux

ChromeMiner: reverse the validation logic, model the transform, and recover the accepted input.

hardware

Sneak peek

Firmware+1

Sneak peek: decode the captured signal, map the bitstream, and recover the flag.

misc

Compressor

Compressor: reduce the custom rules to a scriptable check and use the smallest reliable path to the flag.

misc

Cubicle Riddle

Cubicle Riddle: reduce the custom rules to a scriptable check and use the smallest reliable path to the flag.

hardware

Gawk

Firmware+1

Gawk: decode the captured signal, map the bitstream, and recover the flag.

misc

Locked Away

Locked Away: reduce the custom rules to a scriptable check and use the smallest reliable path to the flag.

hardware

Secure Digital

Firmware+3

Secure Digital: decode the captured signal, map the bitstream, and recover the flag.

pwn

Vault-breaker

Linux

Vault-breaker: build the exploit primitive, stabilize the payload, and use it to read the flag.