Insights
Insights & Writeups
Practical security articles, vulnerability analysis, and walkthroughs focused on understanding behavior, impact, and remediation.
-
Clean Sweep — ECOVACS CGI Command Injection Timing Oracle | NNS CTF
Detailed NNS CTF IoT walkthrough covering firmware extraction, SetFct command injection, timing-oracle design, verification, and defensive lessons.
-
Light-Weight Encryption — Lattice Attack | NNS CTF
Detailed NNS CTF cryptography walkthrough explaining the weak LWE construction, modular lattice, error recovery, CVP step, and equation-level verification.
-
Min beste venn — PCAP Bit Encoding | NNS CTF
Detailed NNS CTF forensics walkthrough explaining how HTTP request multiplicity encoded bytes and how to decode the PCAP reproducibly.
-
Sleepy CPU — Power-Trace Flag Recovery | NNS CTF
Detailed NNS CTF hardware-forensics walkthrough explaining the Zephyr loop, power-trace segmentation, sampling conversion, decoder, and side-channel lessons.
-
Harald Blåtann — BLE Device Information Service | NNS CTF
Detailed NNS CTF reverse-engineering walkthrough covering Intel HEX validation, Zephyr GATT attribute reconstruction, UUID checks, and flag assembly.
-
Censored Country Walkthrough — Smuggling Past a JA4 TLS Fingerprint Firewall
How a leaked X-Expected-JA4 header plus a hand-crafted uTLS ClientHello slipped past a zero-trust TLS fingerprint gateway (CyberTalents Web/Crypto CTF).
-
GRC in Information Security: Governance, Risk, and Compliance Explained
GRC (Governance, Risk, and Compliance) is the framework that aligns an organisation’s security strategy with its business objectives. Learn what the three pillars mean,…
-
StopAndProtect Hacks 2,000 WordPress Sites to Spread Malware
StopAndProtect Hacks 2,000 WordPress Sites to Spread Malware A compromised WordPress site is rarely just a website problem. If attackers can alter pages, inject…