Reverse engineering a Linux ELF64 binary using Ghidra to bypass anti-debugging protections and decrypt XOR-encrypted password validation.
Exploiting a missing base-uri directive in Content Security Policy to hijack relative script paths and steal cookies through base tag injection.
Reverse engineering a password-protected binary that constructs its validation key through multi-stage transformations, runtime modifications, and non-printable character injection.
Each write-up documents my journey through various CTF challenges and security labs. I share detailed methodologies, tools used, and lessons learned to help others in the cybersecurity community.