Introduction At the start of 2026 I read a heise report about vulnerabilities in the U-Boot bootloader that allowed bypassing the chain of trust. The write-up described a class of integer overflow...

This post will cover the first phase of the binary bomb lab originally created by CMU. I have done it while working through OST2-1001 Assembly on OpenSecurityTraining2. At first we start the bina...

This post will document my first experience with inline assembly. It is also a short writeup for the first exercise in the OST2 1001 Assembly course. Introduction The last few days i’ve been refr...

Introduction When Noam Chomsky and Edward S. Herman published Manufacturing Consent in 1988, they argued that media in liberal democracies do not function as neutral watchdogs, but rather as power...

Introduction This 3-4 part series demonstrates some basic to moderately advanced techniques for analyzing an old TP-Link router in order to build an exemplary attack chain. Part 1 - Reconnaissanc...

This time we are tasked with performing our first memory write. First glance gdb We see that we are given some things to check out like usefulFunction, useful Gadget(our write gadget) ...

The second challenge of ropemporium asks us to use one single gadget to call system and return safely to main. First glance As we can see NX(non executable Stack) is activated which means ...

The first challenge of ropemporium offers us any easy way to get into the art of return-oriented programming. First glance As we can see NX(non executable Stack) is activated which means we ...

Today i will walk you through ropemporium challenge 6 “fluff”. There was nothing fluffy about this challenge for me. First glance Next up we will go on to find our write primitive and rever...

Now it’s time to call some functions with multiple arguments. First glance gdb As we can see we will again overflow read in the pwnme function to rop our way through 3 functions, as dema...