web
FedCM as a Session Hijacking Gadget
Sites using FedCM with XSS vulnerability are inherently vulnerable to session hijacking.
ctf
Portswigger | Authentication Bypass via Encryption Oracle Explained
This post offers a deeper understanding of the encryption oracle mechanics behind this lab.
crypto
The Math Behind RSA CRT Fault Attack
Post explaining why the RSA Chinese Remainder Theorem (CRT) Fault Attack works
reverse-engineering
Memory Debugger in Practice
Building a memory debugger involves substituting memory functions such as malloc or free with our solution, which keeps track of allocated and freed memory while still calling the original function. This is achieved by changing the pointers to the functions in the Import Address Table to point to the substitutes. These notes summarize the complex structure of the Portable Executable (PE) file format, its headers, and the mechanisms used for dependency resolution and runtime manipulation (hooking).
ctf
CTF | HÄKKSHOP
Wrong check of invitation codes, elevating privileges by triggering an error in the middle a function, wrong session handling (missing session invalidation logic).