[ /dev/bits ]
Technical writing, CTF challenge breakdowns, reverse engineering notes, and curated binary analysis resources.
A deep-dive into how the Linux dynamic linker resolves symbols at runtime, covering PLT stubs, GOT entries, and RELA relocation types. Includes traced execution through ld-linux.so.
Read article →How PID, net, mnt, and user namespaces create process isolation. Tracing the kernel path from unshare(2) to execve(2) and examining /proc/$pid/ns symlinks.
Read article →Walking through PE header parsing, section entropy analysis, and import table reconstruction for static identification of malicious capabilities without execution.
Read article →Reversed a custom stack-based virtual machine implementation. Identified instruction set through dynamic analysis, reconstructed bytecode disassembler, and extracted the flag from protected bytecode.
Exploited a use-after-free vulnerability in a custom allocator to achieve arbitrary write. Chained tcache poisoning with a format string leak to bypass ASLR and gain shell.
Bypassed ptrace-based anti-debugging and timing checks in a stripped x86-64 binary. Located flag decryption routine through control flow analysis and runtime instrumentation.
NSA open-source SRE framework for static binary analysis. Multi-target disassembly, decompiler, and Python/Java scripting engine.
>> ghidra-sre.orgModern binary analysis platform with HLIL/MLIL intermediate representations. Clean Python API for automated decompilation analysis.
>> binary.ninjaModern Qt GUI frontend powered by the rizin reverse engineering framework. Native cross-platform binary disassembler and decompiler.
>> cutter.reDe-facto Python CTF framework for rapid exploit development. Automates network sockets, ELF metadata parsing, shellcraft, and cyclic patterns.
>> pwntools.comGDB plug-in tailored for binary exploitation: heap layout visualization (bins/tcache), ROP gadget searches, register context, and stack views.
>> pwndbg.reFast gadget extraction engine across x86, x64, ARM binaries. Facilitates automated ROP chain synthesis and badchar sanitization.
>> github.com/ROPgadgetHyper-fast indexed source code cross-referencer for every Linux kernel version. Immediate definition jumps for structs, syscalls, and drivers.
>> elixir.bootlin.comThe definitive source for Linux manual pages. Covers syscall signatures, return values, kernel error codes, and POSIX standards.
>> man7.orgHigh-level tracing language for Linux eBPF. Dynamic kernel and userspace instrumentation without recompiling code or restarting processes.
>> github.com/bpftrace