Capture the Flag (CTF) are cybersecurity competitions where participants hunt for flags (pieces of text like flag{h3l1o_tH3Re}) hidden inside vulnerable executables, applications, files, and whatnot. These competitions are usually held in one of two formats. The most common format is jeopardy, where each challenge is contained in a separate box and has a number of points attached.
Dynamic Views Loading – Abusing Server Side Rendering in Drogon
What could go wrong releasing a C++ web server with "live reload" into the wild?
From Compression to Compromise: Unmasking Zip File Threats
Deep dive into zip file attacks and mitigations (with examples!).
HKCERT CTF 2023 – Decompetition: Vitamin C++
A beginner-friendly writeup to reverse-engineering C++ a lá decompetition. Years of complex shenanigans condensed!
![Thumbnail for N[Subtype Metaprogramming] is N[Mostly Harmless]](/img/posts/programming/concepts/subtype-metaprogramming/assets/thumbnail-512w.webp)
N[Subtype Metaprogramming] is N[Mostly Harmless]
Inheritance go brrrrrrrr... abusing turing-complete typesystems to write fun programs in Python.
HITCON 2023 – The Blade
Beginner-friendly writeup for a nifty Rust reversing challenge.
GDB/GEF Cheatsheet
Quick command reference on one of the most powerful tools for dynamic analysis.
DUCTF 2023 – Wrong Signal
You straight to oops(). Right away.
The HKUST Firebird CTF Team
Experiences and reflections journeying with the HKUST Firebird CTF Team.
Remorse
Hiding messages with counterpoint.
HKCERT CTF 2022 – C++harming Website
A harming website? Hope it doesn't harm my sleep!
HKCERT CTF 2022 – Base64 Encryption
Frequency analysis with a touch of heuristics.
DownUnderCTF 2022 – ezpz-rev
Grid puzzles aren't that easy.
TAMUctf 2022 – CTF Sim
Oops, your vpointer was redirected.
TAMUctf 2022 – Labyrinth
Using CFGs to solve a control-flow maze.