Cybersecurity research vault by f4zzie: hands-on malware analysis, reverse engineering, binary exploitation, Hack The Box and CTF writeups with full attack chains.https://f4zzie.dev/en-ushttps://f4zzie.dev/notes/picoctf-general-skills/absolute-nano/https://f4zzie.dev/notes/picoctf-general-skills/absolute-nano/picoCTF Absolute Nano writeup using GTFOBins nano technique with sudo privileges to escalate access and read the flag file.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/picoctf-blockchain/access-control/https://f4zzie.dev/notes/picoctf-blockchain/access-control/picoCTF Access Control writeup exploiting an unprotected owner-setter function in a Solidity smart contract to claim ownership and reveal the flag.picoCTF - Blockchainpicoctfblockchainhttps://f4zzie.dev/notes/picoctf-reverse-engineering/04-add-on-trap-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/04-add-on-trap-writeup/picoCTF Add On Trap writeup analyzing a binary with anti-debugging traps and reversing the validation to extract the correct flag.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/malware-analysis/advanced-static-ana/https://f4zzie.dev/notes/malware-analysis/advanced-static-ana/Deep dive into advanced static analysis techniques including IDA Pro disassembly, Ghidra decompilation, and identifying malicious code patterns without executing the binary.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/picoctf-reverse-engineering/06-autorev-1-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/06-autorev-1-writeup/picoCTF AutoRev 1 writeup using automated reverse engineering tools like angr or Z3 to solve constraint-based flag validation.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-beacon/https://f4zzie.dev/notes/ctf-writeup/pr-beacon/Status: Pipeline fully reverse-engineered; final key fragments not yet confirmed against the SHA3 oracle. Flag not yet recovered.CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/binary-exploitation/intro-to-buffer-overflows/https://f4zzie.dev/notes/binary-exploitation/intro-to-buffer-overflows/Introduction to buffer overflow vulnerabilities including tool setup, essential GDB commands, and understanding memory corruption fundamentals.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/binary-exploitation/binary-exploitation-methodology/https://f4zzie.dev/notes/binary-exploitation/binary-exploitation-methodology/Complete methodology for approaching binary exploitation challenges, from initial reconnaissance through vulnerability identification to working exploit development.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-reverse-engineering/08-bin-ins3-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/08-bin-ins3-writeup/picoCTF Binary Instrumentation 3 writeup using dynamic binary instrumentation tools like Frida or Pin to trace and solve the challenge.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/picoctf-reverse-engineering/09-binary-instrumentation-4-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/09-binary-instrumentation-4-writeup/picoCTF Binary Instrumentation 4 writeup applying advanced instrumentation techniques to hook functions and extract the flag at runtime.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/binary-exploitation/binary-protections-bypasses/https://f4zzie.dev/notes/binary-exploitation/binary-protections-bypasses/Overview of binary security protections including NX, stack canaries, PIE, RELRO, and ASLR along with techniques to bypass each protection.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/ctf-writeup/pr-blindspot/https://f4zzie.dev/notes/ctf-writeup/pr-blindspot/Flag: r00t{bl1nds1gn4tur3s4r3n0ts0bl1nd}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/ctf-writeup/pr-salvation/https://f4zzie.dev/notes/ctf-writeup/pr-salvation/Flag: r00t{p4dd1ngd035nts4v3y0ufr0mh4st4d}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/picoctf-reverse-engineering/03-bypass-me-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/03-bypass-me-writeup/picoCTF Bypass Me writeup patching or reversing binary validation logic to bypass authentication checks and reveal the flag.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/picoctf-general-skills/bytemancy-2/https://f4zzie.dev/notes/picoctf-general-skills/bytemancy-2/picoCTF Bytemancy 2 writeup sending raw bytes to a network service using pwntools to satisfy binary protocol requirements and retrieve the flag.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/picoctf-general-skills/bytemancy-3/https://f4zzie.dev/notes/picoctf-general-skills/bytemancy-3/picoCTF Bytemancy 3 writeup using objdump disassembly and pwntools p32 packing to reconstruct data from binary sections and extract the flag.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/ctf-writeup/pr-copenhagen/https://f4zzie.dev/notes/ctf-writeup/pr-copenhagen/Flag: r00t{sh0rtp4dd3lt4hunt}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/picoctf-web-exploitation/credential-stuffing/https://f4zzie.dev/notes/picoctf-web-exploitation/credential-stuffing/picoCTF Credential Stuffing writeup using leaked credential databases to automate login attempts and gain unauthorized access to the target application.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/ctf-writeup/day-1/https://f4zzie.dev/notes/ctf-writeup/day-1/CyberStudents Day 1 challenge covering binary to ASCII, hex decoding, and Base64 encoding and decoding transformations to recover hidden flags.CTF Writeupctfwriteuphttps://f4zzie.dev/notes/ctf-writeup/day-2/https://f4zzie.dev/notes/ctf-writeup/day-2/CyberStudents Day 2 challenge involving Wireshark packet capture analysis to extract credentials and hidden data from network traffic.CTF Writeupctfwriteuphttps://f4zzie.dev/notes/ctf-writeup/day-3/https://f4zzie.dev/notes/ctf-writeup/day-3/CyberStudents Day 3 challenge performing DNS chain reconnaissance to discover hidden subdomains and extract flag data from DNS records.CTF Writeupctfwriteuphttps://f4zzie.dev/notes/binary-exploitation/ltracestrace/https://f4zzie.dev/notes/binary-exploitation/ltracestrace/Dynamic analysis using ltrace and strace to trace library calls and system calls, revealing runtime behavior of binary executables.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-binary-exploitation/04-echo-escape-1-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/04-echo-escape-1-writeup/picoCTF Echo Escape 1 writeup leveraging format string bugs in an echo service to read sensitive memory and extract the flag.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-binary-exploitation/02-echo-escape-2-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/02-echo-escape-2-writeup/picoCTF Echo Escape 2 writeup using format string vulnerabilities to leak and overwrite memory for shell access.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-general-skills/failure-failure/https://f4zzie.dev/notes/picoctf-general-skills/failure-failure/picoCTF Failure Failure writeup exploiting HAProxy failover behavior by exhausting rate limits to trigger backend routing to the flag server.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/picoctf-web-exploitation/fool-the-lockout/https://f4zzie.dev/notes/picoctf-web-exploitation/fool-the-lockout/picoCTF Fool the Lockout writeup bypassing a rate-limiting lockout mechanism to brute-force credentials and access the protected endpoint.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/binary-exploitation/format-strings/https://f4zzie.dev/notes/binary-exploitation/format-strings/Format string vulnerability exploitation including reading from and writing to arbitrary memory addresses using printf format specifiers.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-blockchain/front-running/https://f4zzie.dev/notes/picoctf-blockchain/front-running/picoCTF Front Running writeup monitoring the mempool for pending transactions, extracting the plaintext solution, and front-running with higher gas price.picoCTF - Blockchainpicoctfblockchainhttps://f4zzie.dev/notes/picoctf-reverse-engineering/11-gatekeeper-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/11-gatekeeper-writeup/picoCTF Gatekeeper writeup reversing a gatekeeper binary with multiple validation stages to find the correct input sequence for the flag.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/binary-exploitation/gdb-debugging-tools/https://f4zzie.dev/notes/binary-exploitation/gdb-debugging-tools/Comprehensive guide to GDB and debugging tools for binary exploitation, including breakpoints, memory examination, and essential debugging workflows.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/binary-exploitation/pwndbg/https://f4zzie.dev/notes/binary-exploitation/pwndbg/Guide to using pwndbg, a GDB plugin for exploit development, covering its enhanced commands for heap analysis, register display, and memory inspection.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/ctf-writeup/pr-glitchinthevault/https://f4zzie.dev/notes/ctf-writeup/pr-glitchinthevault/Flag: r00t{f4ultys1gn4tur3f4ct0rsth3m0dulus}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/resources/hacking-resources/https://f4zzie.dev/notes/resources/hacking-resources/Curated collection of hacking and cybersecurity resources including learning platforms, tools, reference materials, and practice environments.Resourcesresourceshttps://f4zzie.dev/notes/picoctf-web-exploitation/hashgate/https://f4zzie.dev/notes/picoctf-web-exploitation/hashgate/picoCTF Hashgate writeup exploiting an IDOR vulnerability where user IDs are hashed with MD5, allowing access to other users accounts by predicting hash values.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/binary-exploitation/heap-exploitation/https://f4zzie.dev/notes/binary-exploitation/heap-exploitation/Heap exploitation techniques covering heap memory management, use-after-free, double-free, heap overflow, and tcache poisoning attacks.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-binary-exploitation/05-heap-havoc-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/05-heap-havoc-writeup/picoCTF Heap Havoc writeup exploiting heap memory management flaws including use-after-free or heap overflow to gain code execution.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-reverse-engineering/01-hidden-cipher-1-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/01-hidden-cipher-1-writeup/picoCTF Hidden Cipher 1 writeup reversing an encryption algorithm to decode the hidden flag from ciphertext output.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/picoctf-reverse-engineering/02-hidden-cipher-2-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/02-hidden-cipher-2-writeup/picoCTF Hidden Cipher 2 writeup tackling a more complex cipher implementation requiring deeper static analysis to reverse the encoding.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/htb-writeup/htb-facts-writeup/https://f4zzie.dev/notes/htb-writeup/htb-facts-writeup/HackTheBox Facts machine writeup covering Camaleon CMS privilege escalation, MinIO credential discovery, SSH key recovery, and sudo-based root escalation.HTB Writeuphacktheboxwriteuphttps://f4zzie.dev/notes/htb-writeup/htb-wingdata-writeup/https://f4zzie.dev/notes/htb-writeup/htb-wingdata-writeup/HackTheBox WingData machine writeup chaining vhost discovery, Wing FTP unauthenticated RCE, XML credential extraction, hash cracking, and tarfile privilege escalation.HTB Writeuphacktheboxwriteuphttps://f4zzie.dev/notes/picoctf-reverse-engineering/10-jitfp-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/10-jitfp-writeup/picoCTF JITFP writeup reversing a just-in-time compiled program, analyzing dynamically generated code to understand flag computation.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-labyrinth/https://f4zzie.dev/notes/ctf-writeup/pr-labyrinth/Challenge: Labyrinth (crypto/misc reverse engineering, VM-based crackme)CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/ctf-writeup/day-4/https://f4zzie.dev/notes/ctf-writeup/day-4/CyberStudents Day 4 challenge writeup covering additional CTF techniques and problem-solving approaches for flag discovery.CTF Writeupctfwriteuphttps://f4zzie.dev/notes/htb-writeup/secretpictures/https://f4zzie.dev/notes/htb-writeup/secretpictures/HackTheBox Sherlocks SecretPictures investigation writeup involving digital forensics analysis to uncover hidden data within image files.HTB Writeuphacktheboxwriteuphttps://f4zzie.dev/notes/htb-writeup/writeup/https://f4zzie.dev/notes/htb-writeup/writeup/HackTheBox Simple Encryptor challenge writeup, reversing a PRNG-based file encryption scheme by recovering the seed and decrypting the flag.HTB Writeuphacktheboxwriteuphttps://f4zzie.dev/notes/malware-analysis/malware-api/https://f4zzie.dev/notes/malware-analysis/malware-api/Analysis of common Windows API calls used by malware for file operations, process manipulation, registry modifications, and network communication.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/malware-analysis/md5-check/https://f4zzie.dev/notes/malware-analysis/md5-check/Using MD5 hashes for malware identification and verification, including command-line tools and online lookup databases like VirusTotal.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/picoctf-general-skills/my-git/https://f4zzie.dev/notes/picoctf-general-skills/my-git/picoCTF My Git writeup forging a Git commit identity to bypass repository validation checks and retrieve the flag.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/picoctf-web-exploitation/no-fa/https://f4zzie.dev/notes/picoctf-web-exploitation/no-fa/picoCTF No FA writeup exploiting Flask session cookie vulnerabilities to leak OTP codes and crack passwords for authentication bypass.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/picoctf-binary-exploitation/07-offset-cycle-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/07-offset-cycle-writeup/picoCTF Offset Cycle writeup solving a binary exploitation challenge involving cyclic offset calculation and return address control.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-binary-exploitation/08-offset-cyclev2-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/08-offset-cyclev2-writeup/picoCTF Offset Cycle V2 writeup building on the first version with additional protections requiring more advanced exploitation techniques.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-general-skills/password-profiler/https://f4zzie.dev/notes/picoctf-general-skills/password-profiler/picoCTF Password Profiler writeup using CUPP to generate a custom wordlist from OSINT data and cracking a SHA-1 hash to recover the password.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/malware-analysis/pe-headers/https://f4zzie.dev/notes/malware-analysis/pe-headers/Analyzing Portable Executable headers including DOS header, COFF header, optional header, section tables, Import Address Table, and detecting packed binaries.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-phantomnonce/https://f4zzie.dev/notes/ctf-writeup/pr-phantomnonce/Flag: r00t{ECDSAn0ncesfr0manLCGc0llaps3t0aquadraticindrhin0charge}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/picoctf-binary-exploitation/06-pizza-router-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/06-pizza-router-writeup/picoCTF Pizza Router writeup exploiting a routing application through buffer overflow or command injection to capture the flag.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/binary-exploitation/practice-platforms/https://f4zzie.dev/notes/binary-exploitation/practice-platforms/Curated list of platforms for practicing binary exploitation skills including wargames, CTF archives, and vulnerable-by-design applications.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-general-skills/printer-shares/https://f4zzie.dev/notes/picoctf-general-skills/printer-shares/picoCTF Printer Shares writeup enumerating SMB shares to discover and access hidden printer share files containing the flag.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/picoctf-general-skills/printer-shares-3/https://f4zzie.dev/notes/picoctf-general-skills/printer-shares-3/picoCTF Printer Shares 3 writeup discovering a writable cron job script on a printer share and exploiting it for remote code execution to capture the flag.picoCTF - General Skillspicoctfgeneral-skillshttps://f4zzie.dev/notes/malware-analysis/process-injection/https://f4zzie.dev/notes/malware-analysis/process-injection/Comprehensive overview of process injection techniques including DLL injection, process hollowing, APC injection, and thread execution hijacking.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/reverse-engineering/segfault/https://f4zzie.dev/notes/reverse-engineering/segfault/Crackme writeup for SEGFAULT challenge, demonstrating reverse engineering techniques to find the correct input that satisfies binary validation checks.Reverse Engineeringreverse-engineeringhttps://f4zzie.dev/notes/binary-exploitation/pwntools-template/https://f4zzie.dev/notes/binary-exploitation/pwntools-template/Reusable pwntools exploit template with boilerplate for local and remote connections, ELF loading, ROP chain building, and payload construction.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-binary-exploitation/01-quizploit-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/01-quizploit-writeup/picoCTF Quizploit writeup exploiting a quiz application through buffer overflow to redirect execution and capture the flag.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-blockchain/reentrance/https://f4zzie.dev/notes/picoctf-blockchain/reentrance/picoCTF Reentrance writeup deploying an attacker contract to exploit the classic reentrancy vulnerability and drain the bank contract to zero.picoCTF - Blockchainpicoctfblockchainhttps://f4zzie.dev/notes/ctf-writeup/pr-relatedparty/https://f4zzie.dev/notes/ctf-writeup/pr-relatedparty/Flag: r00t{fr4nkl1nr31t3rr3l4t3dm3ss4g3s}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/binary-exploitation/rop-fundamentals/https://f4zzie.dev/notes/binary-exploitation/rop-fundamentals/Return-oriented programming fundamentals including gadget discovery, chain construction, ret2libc, and bypassing NX protection through code reuse attacks.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/picoctf-web-exploitation/secret-box/https://f4zzie.dev/notes/picoctf-web-exploitation/secret-box/picoCTF Secret Box writeup exploiting SQL injection to forge authentication tokens and access the secret content containing the flag.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/picoctf-reverse-engineering/07-secure-password-database-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/07-secure-password-database-writeup/picoCTF Secure Password Database writeup reversing a password database application to extract stored credentials and recover the flag.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/malware-analysis/sha256-check/https://f4zzie.dev/notes/malware-analysis/sha256-check/Using SHA256 hashes for malware sample verification and identification, including cross-referencing with threat intelligence databases.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-sharedgrounds/https://f4zzie.dev/notes/ctf-writeup/pr-sharedgrounds/Flag: r00t{c0mm0ngr0und1sd4ng3r0ust3rr1t0ry}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/picoctf-reverse-engineering/05-silent-stream-writeup/https://f4zzie.dev/notes/picoctf-reverse-engineering/05-silent-stream-writeup/picoCTF Silent Stream writeup recovering hidden data from a binary that outputs the flag through non-obvious channels or side effects.picoCTF - Reverse Engineeringpicoctfreverse-engineeringhttps://f4zzie.dev/notes/picoctf-blockchain/smart-overflow/https://f4zzie.dev/notes/picoctf-blockchain/smart-overflow/picoCTF Smart Overflow writeup triggering a uint256 integer overflow in unchecked Solidity arithmetic to satisfy the flag reveal condition.picoCTF - Blockchainpicoctfblockchainhttps://f4zzie.dev/notes/picoctf-web-exploitation/sql-map1/https://f4zzie.dev/notes/picoctf-web-exploitation/sql-map1/picoCTF SQL Map 1 writeup using sqlmap to automate SQL injection attacks and extract password hashes, then cracking them with MD5 lookup.picoCTF - Web Exploitationpicoctfweb-exploitationhttps://f4zzie.dev/notes/binary-exploitation/stack/https://f4zzie.dev/notes/binary-exploitation/stack/Understanding the call stack architecture including stack frames, registers (EBP, ESP, EIP), function prologues and epilogues, and stack-based memory layout.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/binary-exploitation/stack-overflow/https://f4zzie.dev/notes/binary-exploitation/stack-overflow/Stack-based buffer overflow exploitation covering return address overwrite, shellcode injection, NOP sleds, and controlling program execution flow.Binary Exploitationbinary-exploitationpwnhttps://f4zzie.dev/notes/malware-analysis/strings/https://f4zzie.dev/notes/malware-analysis/strings/Extracting and analyzing strings from malware samples using the strings utility and FLOSS for deobfuscating encoded or obfuscated strings.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/picoctf-binary-exploitation/03-tea-cash-writeup/https://f4zzie.dev/notes/picoctf-binary-exploitation/03-tea-cash-writeup/picoCTF Tea-Cash writeup exploiting a virtual currency application through integer overflow or logic flaws to gain unauthorized funds.picoCTF - Binary Exploitationpicoctfbinary-exploitationpwnhttps://f4zzie.dev/notes/ctf-writeup/pr-thinice/https://f4zzie.dev/notes/ctf-writeup/pr-thinice/Flag: r00t{sp11tk3yw13n3rh4rdw4r3l3ak}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/ctf-writeup/pr-trinity/https://f4zzie.dev/notes/ctf-writeup/pr-trinity/Flag: r00t{h4st4dbr04dc4ststr1pl3th3fun}CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/ctf-writeup/pr-trustedcourier/https://f4zzie.dev/notes/ctf-writeup/pr-trustedcourier/Challenge: Trusted Courier (crypto series, tier 1/4, difficulty: easy)CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/reverse-engineering/intro/https://f4zzie.dev/notes/reverse-engineering/intro/TryHackMe introduction to reverse engineering covering fundamental concepts, tools setup, and basic binary analysis techniques for beginners.Reverse Engineeringreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-understudy/https://f4zzie.dev/notes/ctf-writeup/pr-understudy/Flag (reconstructed from evidence):CTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/malware-analysis/windows-api/https://f4zzie.dev/notes/malware-analysis/windows-api/Reference guide for Windows API functions commonly encountered in malware analysis, covering kernel32.dll, ntdll.dll, and user32.dll function families.Malware Analysismalware-analysisreverse-engineeringhttps://f4zzie.dev/notes/ctf-writeup/pr-wiretap/https://f4zzie.dev/notes/ctf-writeup/pr-wiretap/Category: Forensics / Network / CryptoCTF Writeupctfwriteupperfectroothttps://f4zzie.dev/notes/binary-exploitation/x86-ass-implementations/https://f4zzie.dev/notes/binary-exploitation/x86-ass-implementations/x86 assembly language implementations covering common patterns, instruction set reference, calling conventions, and translating C to assembly.Binary Exploitationbinary-exploitationpwn