- 1byte overwrtie in RA & libc_start_main gadget
Dec 31, 2025 · Pwnable, Introduction
- pushrbp brush in RTM
Dec 26, 2025 · Pwnable, Introduction
- kernel mitigation shortcut
Dec 17, 2025 · Kernel, Introduction
- what is kernel file stuct
Dec 17, 2025 · Kernel, Introduction, NOT YET
- how kernel start
Dec 14, 2025 · Introduction, Kernel
- user & kernel address deep analyze
Dec 6, 2025 · Introduction, Kernel
- what is slab
Dec 6, 2025 · Introduction, Kernel
- kernel vmalloc vs kmalloc
Dec 6, 2025 · Introduction, Kernel
- what is direct map
Dec 6, 2025 · Introduction, Kernel, Architecture
- ret2usr template
Dec 2, 2025 · Pwnable, Introduction, Kernel
- user & kernel address
Dec 2, 2025 · Introduction, Kernel
- x86-64 register shortcut
Dec 2, 2025 · Introduction, Architecture, Shortcut
- what is CR3 register
Dec 2, 2025 · Introduction, Kernel, Architecture
- file operation function table & table overwrite
Dec 2, 2025 · Introduction, Kernel, How2pwn
- how to make infinity loop by stack_chk_fail
Nov 26, 2025 · Pwnable, Introduction
- data overwrite by setbuf
Nov 26, 2025 · Pwnable, Introduction
- how to use stdout & stdin & stderr to gadget by stack pivoting
Nov 23, 2025 · Pwnable, Introduction
- fflush() can arbitrary readable by FSOP
Nov 23, 2025 · Glibc, Pwnable, Introduction
- bruteforce oneshot when bof
Nov 23, 2025 · Pwnable, Introduction
- call gadget in __libc_csu_init
Nov 23, 2025 · Pwnable, Introduction
- double pointer calc
Nov 23, 2025 · Reversing, Introduction, Troubleshooting
- re-resolve in got
Nov 22, 2025 · Pwnable, Introduction
- what is stack pivoting
Nov 22, 2025 · Introduction, Pwnable
- when heap overflow
Nov 21, 2025 · Pwnable, Introduction
- what is heap overlapping
Nov 20, 2025 · Pwnable, Introduction, Heap
- when patch binary
Nov 19, 2025 · Pwnable, Introduction
- rbp rsp poisioning
Nov 14, 2025 · Pwnable, Introduction, How2pwn
- send() vulnerability in socket communication
Nov 13, 2025 · Pwnable, Introduction, Troubleshooting
- how ld , libc load to memory & how ASLR work - ld,libc
Nov 11, 2025 · Introduction, Glibc, Kernel
- how main binary load to memory & how ASLR work - main binary & how PIE work
Nov 6, 2025 · Kernel, Introduction
- how heap load to memory & what is brk & how ASLR work - heap
Nov 6, 2025 · Heap, Pwnable, Introduction
- how to change control flow shortcut
Nov 5, 2025 · Pwnable, Introduction, Shortcut
- what is tcache key ( tcache dup mitigation ) & bypass
Nov 2, 2025 · Pwnable, Introduction, Heap
- heap Enhanced Security ( each glibc version )
Nov 1, 2025 · Introduction, Pwnable, Heap
- how to watch source code in pwngdb 2 ( deep analyze )
Oct 31, 2025 · Pwnable, Introduction, Troubleshooting
- what is house of apple
Oct 31, 2025 · How2pwn, Pwnable, Introduction
- gadget diversity
Oct 21, 2025 · Pwnable, Introduction, How2pwn
- glibc analyize
Oct 20, 2025 · Glibc, Introduction, Shortcut
- what is glibc Relocation section
Oct 20, 2025 · Glibc, Introduction
- glibc got overwrite
Oct 20, 2025 · Introduction, How2pwn, Bypass
- what is glibc IFUNC
Oct 18, 2025 · Glibc, Introduction
- set debuginfod enabled on
Oct 18, 2025 · Introduction
- bof by null
Sep 27, 2025 · Pwnable, Introduction
- 2’s complement
Sep 25, 2025 · Introduction
- what is prctl
Sep 25, 2025 · Introduction
- io & file fuction shortcut
Sep 23, 2025 · Shortcut, Introduction, Pwnable
- fd is tty socket file in kernel
Sep 23, 2025 · Introduction, Pwnable, Kernel
- scanf() inner buffer vs read() inner buffe
Sep 16, 2025 · Introduction, Pwnable
- what is file inner buffer
Sep 16, 2025 · Introduction, Pwnable
- what is setvbuf & setbuf
Sep 15, 2025 · Introduction
- how PIE work
Sep 14, 2025 · NOT YET, Kernel, Introduction
- what is dmidecode
Sep 5, 2025 · Introduction
- how to create c++ virtual function table (vptr)
Sep 1, 2025 · C++, Introduction
- how to know PIE & stack canary without using checsec
Aug 22, 2025 · Introduction
- what is capability leak ( in fd perspective )
Aug 22, 2025 · Introduction, Pwnable
- how system work
Aug 22, 2025 · Pwnable, Introduction
- when libc leak pwnable process
Aug 21, 2025 · Pwnable, Introduction, How2pwn
- what is house of force
Aug 20, 2025 · Pwnable, Introduction, Glibc
- what is house of spirit
Aug 20, 2025 · Glibc, Pwnable, Introduction
- what is dup2
Aug 20, 2025 · Pwnable, Introduction
- what is warnx
Aug 20, 2025 · Introduction, Pwnable
- what is lvalue & rvalue
Aug 19, 2025 · Introduction
- C language 2d array ptr vs integer
Aug 18, 2025 · Introduction
- what is __libc_start_main_ret
Aug 17, 2025 · Introduction
- what is ptrace
Aug 16, 2025 · Introduction
- what is mprotect
Aug 16, 2025 · Introduction
- gdbserver
Aug 14, 2025 · Introduction, Development
- read() pwntools vs tty
Aug 14, 2025 · Pwnable, Introduction
- armel vs armhf
Aug 12, 2025 · Pwnable, Introduction
- Arm32 execute & debugging env
Aug 12, 2025 · Introduction, Troubleshooting
- what is FSB 2 ( In-depth analysis )
Aug 9, 2025 · Stack, Pwnable, Introduction
- how ASLR work - stack
Aug 8, 2025 · Introduction, Kernel
- how to know os version by docker hash
Aug 8, 2025 · Introduction
- how malloc work
Aug 7, 2025 · Introduction, Glibc
- SIGSEGV vs -EFAULT
Aug 5, 2025 · Pwnable, Introduction
- how to watch source code in pwngdb
Aug 4, 2025 · Introduction
- what is _IO_FILE_complete
Aug 4, 2025 · Pwnable, Introduction
- how to know glibc file version
Jul 31, 2025 · Introduction
- what is c++ shared_ptr
Jul 29, 2025 · C++, Introduction
- seccomp argument restriction
Jul 28, 2025 · Introduction, Pwnable
- how to breakout chroot with root privilege
Jul 27, 2025 · Introduction
- IO file buffer leak
Jul 27, 2025 · Pwnable, Introduction, Heap
- arm64 architecture instruction
Jul 25, 2025 · Introduction
- what is UTF & ASCII
Jul 22, 2025 · Introduction
- how got filling in runtime
Jul 11, 2025 · Introduction
- what is different between .got & .got.plt
Jul 11, 2025 · Introduction
- what is ASLR & PIE 2
Jul 10, 2025 · Introduction
- how program start
Jul 10, 2025 · Introduction, Glibc, NOT YET
- how program end
Jul 10, 2025 · Introduction, Glibc, NOT YET
- introduction of ELF sections
Jul 10, 2025 · Reversing, Introduction
- what is IFS environment & linux command process
Jul 9, 2025 · Introduction
- objdump & readelf shortcut
Jul 9, 2025 · Shortcut, Introduction
- how sizeof function work
Jul 8, 2025 · Introduction
- shellscript & shell blacklist shortcut
Jul 8, 2025 · Introduction, Shortcut
- what is _IO_FILE & _IO_FILE_plus
Jul 7, 2025 · Introduction, Glibc
- what is iofile_vtable 2
Jul 7, 2025 · Glibc, Introduction
- what is _IO_FILE Arbitrary Address Write
Jul 7, 2025 · Pwnable, Vulnerability, Introduction
- how to get glibc debugging sysmbols
Jul 6, 2025 · Introduction, Troubleshooting, Pwnable
- __run_exit_handlers free hook overwrite
Jul 6, 2025 · Introduction, Pwnable, Glibc
- seccomp shortcut
Jul 6, 2025 · Introduction, Shortcut
- analyze about ldd result
Jul 2, 2025 · Introduction
- LD_LIBRARY_PATH && LD_PRELOAD
Jul 2, 2025 · Introduction
- what is double free and how it work
Jun 28, 2025 · Heap, Introduction, Pwnable
- how to bypass SIGALRM signal in gdb
Jun 27, 2025 · Pwnable, Troubleshooting, Introduction
- how to change program libc
Jun 27, 2025 · Pwnable, Introduction
- what is tcache chunk
Jun 5, 2025 · Pwnable, Heap, Introduction
- what is master canary & fs_base
Apr 2, 2025 · Introduction, Pwnable, Troubleshooting
- analyze vmmap
Apr 2, 2025 · Introduction
- master canary leak & overwrite
Apr 2, 2025 · Pwnable, Introduction
- how to bypass canary by leaking with OOB
Apr 1, 2025 · Bypass, Introduction, Stack
- what is vdso & vsyscall
Apr 1, 2025 · Introduction
- libc_base & ld_base lower 12 bits
Apr 1, 2025 · Troubleshooting, Introduction
- what is _rtld_global & process exit()
Apr 1, 2025 · Pwnable, Introduction, Vulnerability
- how to find ROP gadget
Mar 31, 2025 · Introduction, Pwnable
- \x90 slide when shellcode
Mar 31, 2025 · Pwnable, Introduction
- x86 call convention & how to ROP in x86
Mar 30, 2025 · Introduction, Stack
- one_gadget. constraints analyze & troubleshooting
Mar 30, 2025 · Introduction, Troubleshooting, Pwnable
- what is SFP & FPO
Mar 29, 2025 · Pwnable, Introduction, Stack
- strcpy function null byte vulnerability
Mar 29, 2025 · Pwnable, Introduction, Vulnerability
- what is white space in shellcode & bypass
Mar 28, 2025 · Pwnable, Introduction, Bypass
- how to patch binary with ida
Mar 28, 2025 · Reversing, Introduction
- how to control stripped binary & __libc_start_main
Mar 27, 2025 · Introduction, Pwnable, Reversing
- how to debugging Arm binary
Mar 22, 2025 · Introduction, Troubleshooting
- how to execute Arm binary
Mar 21, 2025 · Introduction, Pwnable
- Arm function prologue & epilogue
Mar 21, 2025 · Introduction
- gcc macro & std vulnerability
Mar 20, 2025 · Pwnable, Introduction
- what is _environ
Mar 19, 2025 · Introduction, Pwnable
- what is FSB
Mar 17, 2025 · FSB, Pwnable, Introduction
- Mac shortcut
Mar 17, 2025 · Introduction, Shortcut
- linux shortcut
Mar 17, 2025 · Shortcut, Introduction
- what is ASLR & PIE
Mar 17, 2025 · Pwnable, Stack, Introduction
- how to bypass PIE with stack information
Mar 17, 2025 · Pwnable, Introduction, Bypass
- how to write FSB exlpoit code
Mar 17, 2025 · Pwnable, Introduction
- GDB shortcut
Mar 17, 2025 · Introduction, Shortcut
- what is __free_hook
Mar 12, 2025 · Pwnable, Introduction
- what is iofile_vtable
Mar 12, 2025 · Pwnable, Introduction
- what is Heap & how it work
Feb 28, 2025 · Pwnable, Introduction, Heap
- what is file descriptor
Feb 28, 2025 · Introduction
- IDA shortcut
Feb 28, 2025 · Introduction, Shortcut
- what is angr & code analyze
Jan 9, 2025 · Reversing, Angr, Introduction
- what is CGI( Common Gateway Interface )
Jan 9, 2025 · Web, Introduction
- what is seccomp & bypass
Jan 6, 2025 · Dreamhack, Pwnable, Introduction
- what is Imagebase
Jan 5, 2025 · Dreamhack, Reversing, Introduction