Cybersecurity

Linux kernel QEMU setup

3 minute read

Compiling your own Linux kernel and running it on QEMU.

Linux Kernel stuck in QEMU: Decompressing Linux… Parsing ELF… forever

3 minute read

Decompressing Linux… Parsing ELF… And nothing happens! What to do when a Linux Kernel does not work in QEMU.

Spread operator leading to XSS

1 minute read

Writeup for the Web Utils chall in DiceCTF 2021.

Analyzing a malicious redirect in a Brazilian university website

11 minute read

University of São Paulo website was redirecting visitors to a malicious page. Here is how I analyzed it.

Reading files in PHP without numbers, quotes, spaces and most other symbols

2 minute read

Writeup for the HPNY Web chall from TetCTF 2021.

VULNCON CTF 2020 - Phishy Email writeup

less than 1 minute read

Writeup for the Phishy Email chall from VULNCON CTF 2020.

VULNCON CTF 2020 - USB Device writeup

less than 1 minute read

Writeup for the USB Device chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Game Over writeup

1 minute read

Writeup for the Game Over chall from VULNCON CTF 2020.

VULNCON CTF 2020 - can_you_c_the_password? writeup

less than 1 minute read

Writeup for the can_you_c_the_password? chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Compromise writeup

less than 1 minute read

Writeup for the Compromise chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Attack writeup

1 minute read

Writeup for the Attack chall from VULNCON CTF 2020.

VULNCON CTF 2020 - T1G3R writeup

2 minute read

Writeup for the T1G3R chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Pcaped writeup

less than 1 minute read

Writeup for the Pcaped chall from VULNCON CTF 2020.

VULNCON CTF 2020 - All I know was zip writeup

less than 1 minute read

Writeup for the All I know was zip chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Find the Coin writeup

less than 1 minute read

Writeup for the Find the Coin chall from VULNCON CTF 2020.

VULNCON CTF 2020 - Maze writeup

1 minute read

Writeup for the Maze chall from VULNCON CTF 2020.

Car Hacking

6 minute read

An overview of the car hacking scenario in the last decade.

CTFLearn Inj3ction Time Writeup

1 minute read

SQL Injection challenge from CTFLearn. This challenge consists of a forms that is vulnerable to SQL injection.

IDOR vulnerability in a personal project API

3 minute read

The REST API I am building as a personal project had an IDOR vulnerability. Here is what I learned from it.

Hacker101 Oauthbreaker Writeup

3 minute read

Android challenge from the Hacker101 CTF. This challenge consists of an application with a simple Oauth authentication using WebViews.