security research · malware · reverse engineering · pwn · ctf
f4zzie
A public vault of hands-on offensive-security research — 84 writeups on the method, the reasoning, and the verification behind each one.
Latest writeups
View all →ABSOLUTE NANO
picoCTF Absolute Nano writeup using GTFOBins nano technique with sudo privileges to escalate access and read the flag file.
Access_Control Writeup
picoCTF Access Control writeup exploiting an unprotected owner-setter function in a Solidity smart contract to claim ownership and reveal the flag.
Add/On Trap Writeup
picoCTF Add On Trap writeup analyzing a binary with anti-debugging traps and reversing the validation to extract the correct flag.
Advanced Static Analysis
Deep dive into advanced static analysis techniques including IDA Pro disassembly, Ghidra decompilation, and identifying malicious code patterns without executing the binary.
Autorev 1 Writeup
picoCTF AutoRev 1 writeup using automated reverse engineering tools like angr or Z3 to solve constraint-based flag validation.
Beacon (Hybrid-01) — Progress Writeup
Status: Pipeline fully reverse-engineered; final key fragments not yet confirmed against the SHA3 oracle. Flag not yet recovered.
Research tracks
Browse notes →picoCTF - General Skills
picoCTF general-skills challenge writeups.
4 notespicoCTF - Blockchain
picoCTF blockchain and smart-contract challenge writeups.
11 notespicoCTF - Reverse Engineering
picoCTF reverse-engineering challenge writeups.
8 notesMalware Analysis
Static analysis, PE headers, Windows APIs, strings, and process-injection tradecraft.
18 notesCTF Writeup
Capture-the-flag solutions across pwn, web, forensics, and crypto categories.
14 notesBinary Exploitation
Stack and heap exploitation, ROP, format strings, protections, pwndbg and pwntools.
6 notespicoCTF - Web Exploitation
picoCTF web-exploitation challenge writeups.
8 notespicoCTF - Binary Exploitation
picoCTF pwn challenges with full exploitation walkthroughs.
1 notesResources
Curated tools, platforms, and learning references for offensive security.
4 notesHTB Writeup
Hack The Box machine and Sherlock attack chains: recon, exploitation, and root.
2 notesReverse Engineering
Crackmes, cipher challenges, x86 assembly, Ghidra, Cutter and x64dbg workflows.