Results for “ctf”

Android APK reverse engineering — apktool, jadx, Frida dynamic instrumentation, native .so analizi, root/SSL bypass

The English summary is being prepared. Showing the original description.

Sigreturn Oriented Programming (SROP) — sigreturn syscall ile tüm registerları tek payload'da kontrol etme; gadget kıtlığında ROP alternatifi

The English summary is being prepared. Showing the original description.

Windows/Linux memory dump, hiberfil.sys analizi — volatility3 ile process, credential, env var çıkarma, DPAPI master key kurtarma ve pypykatz entegrasyonu.

The English summary is being prepared. Showing the original description.

Ses steganografi — WAV LSB, DTMF decode, spektogram analizi, DeepSound, Morse code ve Python ile tam çözüm şablonları.

The English summary is being prepared. Showing the original description.

Insecure deserialization — Python pickle, Java, PHP object injection ile RCE

The English summary is being prepared. Showing the original description.

Glibc heap exploitation — tcache poisoning, unsorted bin leak, IO_FILE FSOP

The English summary is being prepared. Showing the original description.

printf format string ile arbitrary read/write — GOT overwrite, libc leak, RCE

The English summary is being prepared. Showing the original description.

Aynı N ile iki farklı e kullanılarak şifrelenmiş mesaj, extended GCD ile çözülür

The English summary is being prepared. Showing the original description.

NX açık, ASLR varsa libc leak + system("/bin/sh") zinciri

The English summary is being prepared. Showing the original description.

RSA PKCS#1 v1.5 padding oracle saldırısı — Bleichenbacher'in 1998 saldırısı

The English summary is being prepared. Showing the original description.

Remote binary exploitation — pwntools remote(), socket yönetimi, interactive shell

The English summary is being prepared. Showing the original description.

Görüntü steganografi — LSB/MSB, alpha kanal, metadata, file carving tespiti ve Python Pillow ile her kanalın bit-seviyesinde analizi.

The English summary is being prepared. Showing the original description.

SECCOMP filter analizi ve bypass — yasaklı syscall'lar etrafında ORW shellcode, open+sendfile, openat2, io_uring teknikleri

The English summary is being prepared. Showing the original description.

JWT saldırıları — alg:none, HMAC brute-force, floating point bypass, CVE-2022-39227

The English summary is being prepared. Showing the original description.

GraphQL saldırıları — introspection, aliased query batching, rate limit bypass

The English summary is being prepared. Showing the original description.

ELF binary statik analiz — file, strings, objdump, readelf, nm, Ghidra workflow

The English summary is being prepared. Showing the original description.

Linux kernel pwn temelleri — char device exploitation, ret2usr, KPTI/SMEP/SMAP bypass, modprobe_path overwrite, privesc primitives

The English summary is being prepared. Showing the original description.

Stack buffer overflow + ROP chain ile kontrol akışı ele geçirme — NX etkin, canary yok senaryoları için eksiksiz tarif

The English summary is being prepared. Showing the original description.

Web race condition exploitation — TOCTOU, single-packet attack, limit overrun, parallel race testing

The English summary is being prepared. Showing the original description.

PCAP/network capture analizi — Wireshark, tshark, Python scapy/pyshark ile SMTP/FTP/DNS/custom protokol çözme, gizli veri çıkarma.

The English summary is being prepared. Showing the original description.

RSA'da özel üs d küçük olduğunda (d < N^0.25) sürekli kesirler (continued fractions) genişlemesi ile d'yi kurtarma ve şifreyi çözme saldırısı.

The English summary is being prepared. Showing the original description.

RSA ve crypto için kafes (lattice) tabanlı saldırılar — Coppersmith, LLL/BKZ, Boneh-Durfee, Hastad broadcast, Franklin-Reiter, stereotyped message

The English summary is being prepared. Showing the original description.

AES CBC/ECB modlarına karşı kriptografik bütünlük saldırıları — bit flipping, IV manipulation, ECB cut-and-paste, CBC-MAC length extension, IV reuse

The English summary is being prepared. Showing the original description.

AES-GCM ve ChaCha20-Poly1305 nonce yeniden kullanımı saldırısı — GF(2^128) polinom kök bulma ile Hash Key kurtarma ve MAC sahteciliği.

The English summary is being prepared. Showing the original description.