Creating my own /dev/null
How I implemented a very simple /dev/null for learning about device drivers
Posts by Year
2021
Linux kernel QEMU setup
Compiling your own Linux kernel and running it on QEMU.
Linux Kernel stuck in QEMU: Decompressing Linux… Parsing ELF… forever
Decompressing Linux… Parsing ELF… And nothing happens! What to do when a Linux Kernel does not work in QEMU.
Spread operator leading to XSS
Writeup for the Web Utils chall in DiceCTF 2021.
Analyzing a malicious redirect in a Brazilian university website
University of São Paulo website was redirecting visitors to a malicious page. Here is how I analyzed it.
Reading files in PHP without numbers, quotes, spaces and most other symbols
Writeup for the HPNY Web chall from TetCTF 2021.
2020
Princípio da Responsabilidade Única
Uma rápida introdução ao S do S.O.L.I.D.
VULNCON CTF 2020 - Phishy Email writeup
Writeup for the Phishy Email chall from VULNCON CTF 2020.
VULNCON CTF 2020 - USB Device writeup
Writeup for the USB Device chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Game Over writeup
Writeup for the Game Over chall from VULNCON CTF 2020.
VULNCON CTF 2020 - can_you_c_the_password? writeup
Writeup for the can_you_c_the_password? chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Compromise writeup
Writeup for the Compromise chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Attack writeup
Writeup for the Attack chall from VULNCON CTF 2020.
VULNCON CTF 2020 - T1G3R writeup
Writeup for the T1G3R chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Pcaped writeup
Writeup for the Pcaped chall from VULNCON CTF 2020.
VULNCON CTF 2020 - All I know was zip writeup
Writeup for the All I know was zip chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Find the Coin writeup
Writeup for the Find the Coin chall from VULNCON CTF 2020.
VULNCON CTF 2020 - Maze writeup
Writeup for the Maze chall from VULNCON CTF 2020.
Car Hacking
An overview of the car hacking scenario in the last decade.
Campus Recruitment
Data science project for the Campus Recruitment problem - How to choose the best MBA and land a great job?
CTFLearn Inj3ction Time Writeup
SQL Injection challenge from CTFLearn. This challenge consists of a forms that is vulnerable to SQL injection.
tsc: How to copy non-TypeScript files when building
tsc does not provide a way to copy non-TypeScript files during build. Here is how to set up a script to do this in a Node.js project.
IDOR vulnerability in a personal project API
The REST API I am building as a personal project had an IDOR vulnerability. Here is what I learned from it.
Docker volumes consuming a lot of space
Use the –rm flag to stop Docker from keeping useless volumes from your containers.
Express.js router error ‘Cannot GET /something’
How I fixed this simple error when implementing an MVC architecture in Node.js
Do I need so many gets and sets in my class?
People prefer things that are easy to use. Use abstractions to hide the hard stuff from the users and allow everyone to enjoy what you create.
Hacker101 Oauthbreaker Writeup
Android challenge from the Hacker101 CTF. This challenge consists of an application with a simple Oauth authentication using WebViews.
How to stop Docker exposing your containers to the world
See how to avoid exposing you container’s ports and secure your applications from external access.