Blog

dumping avr/atmega328/arduino firmware, pure static analysis, speed ctf solve, xor crib dragging over ciphertext with known plaintext attack, cyberchef

Bypassing eval-based restrictions, reconstructing forbidden strings, escaping a builtins blacklist, and exploiting memory manipulation to defeat privilege dropping and read the flag.

Walkthrough of the Slippy web challenge — abusing symlink extraction in ZIP uploads to escape the sandbox and retrieve the flag.