Recent Posts
Building a Standalone LLVM Fuzzing Harness for Apache mod_http2: Understanding Memory Ownership Through Source-Level Analysis
A practical walkthrough of building an isolated LLVM fuzzing harness for Apache mod_http2 and using source-level analysis to validate memory ownership assumptions.
Read post →
Session Hijacking in OWASP WebGoat
Analysis of cryptographic flaws and low entropy in state management. Discover how sequential allocation and timestamp metadata exposure allow programmatic session token prediction and brute-forcing.
Read post →
Authentication Cookie Spoofing in OWASP WebGoat
An architectural deep dive into session token predictability. Reverse-engineer a vulnerable cookie generation mechanism to forge valid administrative credentials and execute an authentication bypass.
Read post →
Reverse engineering I2C signals: How to decode and analyze data
A practical guide to hardware signal analysis. Learn how to tap into an I2C bus, intercept data frames using a logic analyzer, and decode raw hexadecimal traffic into plain text characters.
Read post →