Reverse engineering, pwn, automation and dumb ideas. Vulnerability research, Binary Ninja and CTF writeups.https://zerotistic.blog/https://zerotistic.blog/posts/cff-remover/https://zerotistic.blog/posts/cff-remover/How a Binary Ninja plugin automatically defeats control flow flattening — dispatcher detection, state variable recovery with Z3, and CFG reconstruction — and the math that makes it work.Sun, 03 Nov 2024 00:00:00 GMThttps://zerotistic.blog/posts/vm-obfu/https://zerotistic.blog/posts/vm-obfu/An introduction to VM-based obfuscation — its core components, hardening techniques, and open research directions — with a focus on design philosophy.Thu, 05 Sep 2024 00:00:00 GMThttps://zerotistic.blog/posts/code-of-the-week/https://zerotistic.blog/posts/code-of-the-week/A running index of my Code of the Week series on Hackcyom, covering lesser-known and logic bugs in code review.Thu, 04 Apr 2024 00:00:00 GMThttps://zerotistic.blog/posts/rwctf-wu/https://zerotistic.blog/posts/rwctf-wu/A pwn writeup for the RealWorldCTF 2024 'Let's party in the house' challenge: exploiting a buffer overflow in libjansson to get RCE on a Synology BC500 camera.Tue, 30 Jan 2024 00:00:00 GMThttps://zerotistic.blog/posts/codeql-mrva/https://zerotistic.blog/posts/codeql-mrva/Setting up Multi-Repository Variant Analysis, writing a CodeQL query to find LDAP injection, and scanning a thousand repositories to rediscover a bug in a 24k-star project.Mon, 29 Jan 2024 00:00:00 GMThttps://zerotistic.blog/posts/binary-ninja-rump/https://zerotistic.blog/posts/binary-ninja-rump/Slides and annotations from a lightning talk given at an HackTheBox meetup in Paris on why Binary Ninja is a solid choice for reverse engineering.Tue, 16 Jan 2024 00:00:00 GMThttps://zerotistic.blog/posts/binary-ninja-zero-to-hero/https://zerotistic.blog/posts/binary-ninja-zero-to-hero/A series on Binary Ninja, from the very basics of the UI to writing plugins against its API.Wed, 20 Sep 2023 00:00:00 GMT