A Kinder Russian Roulette — Encryption Practice
Six chambers, six encryption/obfuscation methods. A CTF-style tool for practicing Ghidra analysis and decryption routine writing — from XOR to AES-256 CBC to UUID obfuscation.
Reverse-Engineering
Backdooring PuTTY — PE Injection & C2 Beacon Delivery
Manual PE backdooring from scratch: code cave injection, new section addition, XOR evasion, and Adaptix C2 beacon delivery inside a legitimate PuTTY binary.
Walking the PE — Static Analyzer & PEB Walker
Deep dive into the Windows PE file format and runtime process inspection via PEB walking — parsing headers, import/export tables, and the loader module list.
IP Camera A-CW2303C-M — Hardware & Firmware Analysis
Full hardware-level engagement on an IP PTZ camera: SPI flash dump, filesystem extraction, and manual static analysis revealing 8 vulnerabilities — including two critical RCE.