// writeups

Every challenge, documented.

Walkthroughs written the way I'd want to read them — clear, honest, and reproducible.

3 results

pwn450 pts

Buffer Overflow to ROP Chain

Overwriting the return address, then chaining gadgets to pop a shell on a stripped binary.

web300 pts

SQLi Auth Bypass with Filters

Dropping the login gate past a WAF using stacked queries and a clever encoding trick.

rev500 pts

Deobfuscating a Packed ELF

Unpacking the stub in IDA, tracing the real key check, and reconstructing the flag routine.