Fading Coder

One Final Commit for the Last Sprint

Solutions for BUAACTF2023 Challenges

Miscellaneous Which Element A PCAPNG file named Element.pcapng was provided. Extracting a TCP stream revealed four files. The password hint led to a Hexahue cipher decoder. The decoded password 3.1415 unlocked flag.zip, containing three files: flag1.png, flag2.png, and hint.txt. The file sizes sugge...

Solving Hackpack 2023 Reverse Engineering Challenges with Automated Tools

Competition Overview The Hackpack 2023 CTF featured several reverse engineering challenges available at https://ctf2023.hackpack.club/challenges. This writeup covers two main challenge categories: the Speed-Rev series and a WebAssembly challenge. Speed-Rev Challenge Analysis The Speed-Rev challenge...

Understanding C++ Virtual Tables and VTable Hooking

Exploring Virtual Tables (VTables) To understand the lifecycle and structure of virtual tables in C++, let's start with a set of test classes involving virtual functions and multiple inheritance. Virtual Function Classes #include <cstdio> class SampleClass { public: int internalValue; virtual...

Automating MyBatis Mapping Code from Database Metadata

Add the MyBatis Generator core library along with your database driver to your project dependencies: <dependencies> <dependency> <groupId>com.mysql</groupId> <artifactId>mysql-connector-j</artifactId> <version>8.0.33</version> </dependency> <d...

Solving Two NSSCTF Reverse Engineering Challenges

[CISCN 2021 Preliimnary] babybc This challenge provdies a 64-bit ELF binary obfuscated with LLVM control-flow flattening, distributed as a BC LLVM IR file. Reverse engineering reveals the core problem is a constrained 5x5 sudoku puzzle, with custom order constraints encoded in two matrices, which ca...

Core Capabilities of the WinDbg Debugger

WinDbg, the Windows Application Debugger, is a powerful tool for debugging software on the Windows operating system. Its lineage traces back to the Debug.exe utility from the DOS era. While modern WinDbg has evolved far beyond its predecessor, its fundamental operations remain rooted in core debuggi...

Fundamentals of macOS Binary Analysis and Reverse Engineering

Understanding macOS Binaries and Libraries In macOS, the primary format for binary executables is Mach-O. Dynamic libraries, which are analogous to DLLs on Windows or shared objects (.so) on Linux, use the .dylib extension. This is a BSD-style dynamic library format native to the Darwin kernel and i...