Writeup
A retrospection on a challenge or problem. How was the problem solved? What issues were encountered along the way? How were these issues dealt with?
Sharing is Caring: Arbitrary Code Execution for Breakfast
Binary exploitation in C++, gadget mania, and a new form of deserialization attack.
Reverse Engineering a Siemens Programmable Logic Controller for Funs and Vulns (CVE-2024-54089, CVE-2024-54090 & CVE-2025-40757)
When security by obscurity breaks...
Output-Invariant and Time-Based Testing – Practical Techniques for Black-Box Enumeration of LLMs
Abusing inherent context and sluggishness in LLMs for stealthy enumeration of prompt injection points.
Dynamic Views Loading – Abusing Server Side Rendering in Drogon
What could go wrong releasing a C++ web server with "live reload" into the wild?
Automating Boolean-Based SQL Injection with Python
How to be efficiently lazy at finding hidden gems in predictable places – Database Edition
Optimising Web Icons for Fun
Ejecting unused cargo for leaner performance.
HKCERT CTF 2023 – Decompetition: Vitamin C++
A beginner-friendly writeup to reverse-engineering C++ a lá decompetition. Years of complex shenanigans condensed!
Site Updates and Migration to Cloudflare Pages
Improvements, Optimisations, and a Better Stack with Cloudflare Hosting
![Thumbnail for N[Subtype Metaprogramming] is N[Mostly Harmless]](/img/posts/programming/concepts/subtype-metaprogramming/assets/thumbnail-512w.webp)
N[Subtype Metaprogramming] is N[Mostly Harmless]
Inheritance go brrrrrrrr... abusing turing-complete typesystems to write fun programs in Python.
HITCON 2023 – The Blade
Beginner-friendly writeup for a nifty Rust reversing challenge.
DUCTF 2023 – Wrong Signal
You straight to oops(). Right away.
Site Migration to Eleventy
JavaScript go brrrrrrrrr.
Remorse
Hiding messages with counterpoint.
AOC 2021 Day 22 – Reactor Reboot
Reboot reactors from a submarine using set theory.
HKCERT CTF 2022 – C++harming Website
A harming website? Hope it doesn't harm my sleep!
HKCERT CTF 2022 – Base64 Encryption
Frequency analysis with a touch of heuristics.
DownUnderCTF 2022 – ezpz-rev
Grid puzzles aren't that easy.
AOC 2021 Day 24 – No U
Finally a reverse engineering challenge in Advent of Code.
AOC 2021 Day 16 – Parser Combinator Fun
Decoding packets with monads.
TAMUctf 2022 – CTF Sim
Oops, your vpointer was redirected.
TAMUctf 2022 – Labyrinth
Using CFGs to solve a control-flow maze.