software.security
ctf infosec reverse pentesting pwn cryptography redteam stego

Reverse Engineering

Reverse engineering is the process of gleaning implementation details from a black box. It is also a category of CTF challenge which involves tasks such as decompiling, understanding program logic, etc. Reverse is also one of the strongest UNO cards.

No u: dipper bouncing off a rainbow.

Thumbnail for Reverse Engineering a Siemens Programmable Logic Controller for Funs and Vulns (CVE-2024-54089, CVE-2024-54090 & CVE-2025-40757)
Thumbnail for Reverse Engineering a Siemens Programmable Logic Controller for Funs and Vulns (CVE-2024-54089, CVE-2024-54090 & CVE-2025-40757)

Reverse Engineering a Siemens Programmable Logic Controller for Funs and Vulns (CVE-2024-54089, CVE-2024-54090 & CVE-2025-40757)

When security by obscurity breaks...

Thumbnail for HKCERT CTF 2023 – Decompetition: Vitamin C++
Thumbnail for HKCERT CTF 2023 – Decompetition: Vitamin C++

HKCERT CTF 2023 – Decompetition: Vitamin C++

A beginner-friendly writeup to reverse-engineering C++ a lá decompetition. Years of complex shenanigans condensed!

Thumbnail for N[Subtype Metaprogramming] is N[Mostly Harmless]
Thumbnail for N[Subtype Metaprogramming] is N[Mostly Harmless]

N[Subtype Metaprogramming] is N[Mostly Harmless]

Inheritance go brrrrrrrr... abusing turing-complete typesystems to write fun programs in Python.

Thumbnail for HITCON 2023 – The Blade
Thumbnail for HITCON 2023 – The Blade

HITCON 2023 – The Blade

Beginner-friendly writeup for a nifty Rust reversing challenge.

Thumbnail for GDB/GEF Cheatsheet
Thumbnail for GDB/GEF Cheatsheet

GDB/GEF Cheatsheet

Quick command reference on one of the most powerful tools for dynamic analysis.

Thumbnail for DUCTF 2023 – Wrong Signal
Thumbnail for DUCTF 2023 – Wrong Signal

DUCTF 2023 – Wrong Signal

You straight to oops(). Right away.

Thumbnail for HKCERT CTF 2022 – C++harming Website
Thumbnail for HKCERT CTF 2022 – C++harming Website

HKCERT CTF 2022 – C++harming Website

A harming website? Hope it doesn't harm my sleep!

Thumbnail for DownUnderCTF 2022 – ezpz-rev
Thumbnail for DownUnderCTF 2022 – ezpz-rev

DownUnderCTF 2022 – ezpz-rev

Grid puzzles aren't that easy.

Thumbnail for AOC 2021 Day 24 – No U
Thumbnail for AOC 2021 Day 24 – No U

AOC 2021 Day 24 – No U

Finally a reverse engineering challenge in Advent of Code.

Thumbnail for TAMUctf 2022 – Labyrinth
Thumbnail for TAMUctf 2022 – Labyrinth

TAMUctf 2022 – Labyrinth

Using CFGs to solve a control-flow maze.