writeups

Writeup for the Mobile Hacking Lab Captain No Hook challenge, covering iOS anti-debugging, jailbreak detection bypasses, and runtime flag extraction with Frida.

Writeup for the Mobile Hacking Lab No Escape challenge, covering iOS IPA reverse engineering and bypassing jailbreak detection with Frida.

Writeup for the Mobile Hacking Lab Secure Notes challenge, covering Android content provider abuse and PIN brute forcing.

Writeup for the Mobile Hacking Lab Config Editor challenge, covering SnakeYAML insecure deserialization and Android intent exploitation.

BHack 2022 writeup for B64, a PHP challenge solved by abusing arbitrary object instantiation and built-in classes.

BHack 2022 writeup for Image Repo, a file upload challenge solved through blind command injection in a PHP exec() call.

BHack 2022 writeup for Ultimate Encryptor, a reverse engineering challenge solved by analyzing and reversing a custom encryption routine.

Writeup for the TryHackMe Year of the Fox machine, covering OS command injection, port forwarding, and privilege escalation.

Writeup for the TryHackMe Year of the Rabbit machine, covering web enumeration, FTP brute force, and privilege escalation.