writeups

Writeup do desafio Captain No Hook do Mobile Hacking Lab, cobrindo anti-debugging no iOS, bypass de detecção de jailbreak e extração da flag em runtime com Frida.

Writeup do desafio No Escape do Mobile Hacking Lab, cobrindo engenharia reversa de IPA no iOS e bypass de detecção de jailbreak com Frida.

Writeup do desafio Secure Notes do Mobile Hacking Lab, cobrindo abuso de content provider no Android e brute force de PIN.

Writeup do desafio Config Editor do Mobile Hacking Lab, cobrindo insecure deserialization com SnakeYAML e exploração via intents no Android.

BHack 2022 writeup for B64, a PHP challenge solved by abusing arbitrary object instantiation and built-in classes.

BHack 2022 writeup for Image Repo, a file upload challenge solved through blind command injection in a PHP exec() call.

BHack 2022 writeup for Ultimate Encryptor, a reverse engineering challenge solved by analyzing and reversing a custom encryption routine.

Writeup da máquina Year of the Fox do TryHackMe, cobrindo command injection, port forwarding e privilege escalation.

Writeup da máquina Year of the Rabbit do TryHackMe, cobrindo enumeração web, brute force em FTP e privilege escalation.