Welcome to my blog! Here you'll find a collection of my thoughts and experiences. I hope you enjoy reading them as much as I enjoy writing them.
A hands-on demonstration of forensic Git analysis showing how a removed commit containing sensitive information was recovered using commit history checkout during a CTF challenge.
Identifying hidden Base64 strings inside EXIF metadata and decoding them to recover a concealed flag — a practical forensic analysis approach used in CTF challenges.
Step-by-step analysis of a multi-layer encoding challenge where nested Base64 and ROT13 shifting were used to obscure a flag — demonstrating practical CTF cryptography skills.
A malware investigation using Windows Event Viewer logs uncovered the infection path, identified the malicious process, and decoded a Base64-encoded secret embedded in the execution chain.
A structured malware analysis exercise on a malicious FakeGPT browser extension. Static code inspection was performed to answer investigative questions and identify behaviors relevant to Blue Team defense.
A manual Smali patch was applied to an Android APK after static analysis revealed that the flag function was never called. Redirecting the function call and rebuilding the app exposed the hidden flag.
A static analysis of an Android APK uncovered misleading password logic designed to hide the real flag function. By modifying the Smali code to patch the function call, the correct method was executed and the flag recovered.
Static analysis of an Android app revealed a weak password protection mechanism based on simple arithmetic and string manipulation. Manually decoding the logic exposed the correct password and retrieved the flag.
Reverse engineering an Android app revealed a secret key stored in strings.xml. By tracing input validation and comparing the stored value, the hidden flag was successfully exposed.