Insight Labs: security research notes
Hands-on security research: CTF write-ups, reverse engineering, web security and hardware security.
Featured
Latest posts
RCTF 2015 Crypto 100: data hidden in Base64 padding
How the unused padding bits in Base64 can carry a hidden message, and a short script to recover it.
Read moreRCTF 2015 Reverse 300: Crack Me
Walking through a packed binary, finding the check routine and recovering the key.
Read moreRCTF 2015 Web 100 and Web 150
Two web challenges: an upload filter bypass and a multi-step privilege escalation.
Read moreFireEye FLARE-On 2015: solutions
Notes on the second FLARE-On challenge set, level by level.
Read moreHow hijacked Baidu traffic was used to DDoS GitHub
How injected analytics script turned ordinary visitors' browsers into a flood of requests against GitHub.
Read moreBadIRET 漏洞利用分析
A look at the BadIRET Linux kernel flaw (CVE-2014-9322) and how it can be exploited (Chinese).
Read more