Control flow flattening (CFF) is an interesting form of code obfuscation. While most obfuscation techniques focus on making individual operations hard to understand, CFF goes for something more amb...

I’ve written this article for Hackcyom, which is my current company. Please feel free to read the write up on their website: XS-Leaks: An Inherent Vulnerability Class in the Web Platform This arti...

I’ve written this article for Hackcyom, which is my current company. Please feel free to read the write up on their website: Virtual Machine based obfuscation: An Overview Virtual Machine based ...

Hello everybody! I have been busy with various things lately and didn’t post anything new lately. However, as part of my daily job, I have started writing a blog post series on code review. It is m...

Hi, today is a blog post on that serves as a Write Up for the RealWorldCTF 2024’s challenge named “Let’s party in the house”. I’ve written this article for Hackcyom, which is my current company. Pl...

Hi, today is a blog post on CodeQL MRVA. I’ve written this article for my current company, Hackcyom. Please feel free to read the article on their website: Rediscovering vulnerabilities with CodeQL...

Hi! I got the occasion to make a small talk at an HackTheBox meetup in Paris the 16th january 2024. The following are my slides. The talk is mostly about why Binary Ninja is a viable option and wh...

Hello everyone~! Today I am back with another part of the serie Binary Ninja: Zero to Hero 2! I am very excited to post this part, as the next part will start diving into the API. As said previousl...

Hi everyone, and welcome to the first post of the serie Binary Ninja: Zero to Hero! This post will be an introduction to Binary Ninja and an overview of its different components, more than an tutor...

Hello everyone! I’m excited to make my debut on this blog. Here, I’ll be sharing insights into my research, various projects, and my reflections. However, today’s post isn’t focused on those topics...