Description: Security Research and Guides
Video games are truly intriguing pieces of software. They are built with cutting edge technology and employ some of the most wild and innovative logic , all while being artistically expressive and generally entertaining. Read More
For the past week, I have been slowly and steadily enjoying a new CTF website, TargetPractice . I finally completed their Android crypto/reverse-engineering challenge, Dead Drop, and wanted to share my workflow and experience with this fun exercise. Read Write-Up
In this quickstart guide, we will be learning about the role of object deserialization in security. Deserialization is featured in most major languages and when implemented improperly, either by the language itself or by the application being written, can be a fruitful attack surface. CVE-2017-5941 is an example of flawed implementation of deserialization in the node.js JavaScript framework. Read More