Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 25 Mar 2023 09:46:55 GMT
———————————————
✏️Title: RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part 1
———————————————
📎Link: https://medium.com/p/a10dcb08ff54
———————————————
Tags: #code_analysis #insecure_deserialization #remote_code_execution #application_security #java_rmi

Medium

RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part 1

Originally written during March 2022

4 views10:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sun, 26 Mar 2023 07:26:59 GMT
———————————————
✏️Title: RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part two
———————————————
📎Link: https://medium.com/p/e349a381a145
———————————————
Tags: #java_rmi #application_security #code_analysis #insecure_deserialization #remote_code_execution

Medium

RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part two

Originally written during March 2022

3 views08:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sun, 26 Mar 2023 10:06:00 GMT
———————————————
✏️Title: RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part three
———————————————
📎Link: https://medium.com/p/1453669c8b6a
———————————————
Tags: #java_deserialization #application_security #insecure_deserialization #code_analysis #remote_code_execution

Medium

RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part three

Originally written during March 2022

3 views12:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 27 Mar 2023 18:03:52 GMT
———————————————
✏️Title: RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part four
———————————————
📎Link: https://medium.com/p/634c939bacf7
———————————————
Tags: #application_security #remote_code_execution #code_analysis #java_deserialization #java_rmi

Medium

RCE via Insecure Deserialization in Java RMI service: Deep Dive into Java Code — Part four

Originally written during March 2022

9 views20:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 18 Sep 2023 23:47:37 GMT
———————————————
✏️Title: Mother’s Secret -TryHackme- (Detailed explanation)
———————————————
📎Link: https://medium.com/p/4dc9e4df8643
———————————————
Tags: #ctf_writeup #cybersecurity #code_analysis #tryhackme

Medium

Mother’s Secret -TryHackme- (Detailed explanation)

Hi, today we are going to talk about a interesting ctf box in Tryhackme called ‘Mother’s Secret’.

5 views02:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 27 Sep 2023 00:45:14 GMT
———————————————
✏️Title: Super Secret Tip -TryHackMe- (Detailed explanation)
———————————————
📎Link: https://medium.com/p/2e15329f6d7b
———————————————
Tags: #tryhackme #code_analysis #puzzle #cybersecurity #ctf_writeup

Medium

Super Secret Tip -TryHackMe- (Detailed explanation)

Hi, This is OwenW, we are going to talk about a new tough room called “Super Secret Tip”. It is a new medium level room in TryHackMe. Let’s…

10 views02:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 16 Oct 2023 21:10:39 GMT
———————————————
✏️Title: How to start Source Code Review
———————————————
📎Link: https://medium.com/p/d1053f35f95e
———————————————
Tags: #cybersecurity #code_review #code_review_process #cyberattack #code_analysis

Medium

How to start Source Code Review

What is Source Code Review to finding bugs into the code using tools and techniques is the source code review.

16 views23:02

Daily Writeups

⤷ Title: Discovering and Exploiting a Path Traversal Vulnerability in Chromium’s md_browser Tool
════════════════════════
𐀪 Author: Pi - The Kernel Panic
════════════════════════
ⴵ Time: Sat, 22 Mar 2025 03:15:30 GMT
════════════════════════
⌗ Tags: #code_analysis #bug_bounty #chromium #vulnerability_assessment #path_traversal

Medium

Discovering and Exploiting a Path Traversal Vulnerability in Chromium’s md_browser Tool

A Deep Dive into the Path Traversal Flaw in Chromium’s md_browser Tool.

23 views04:03

Daily Writeups

⤷ Title: Fortify-Open Text SAST Detailed Installation Guide (Windows & Linux)
════════════════════════
𐀪 Author: Kerem
════════════════════════
ⴵ Time: Thu, 08 May 2025 13:25:00 GMT
════════════════════════
⌗ Tags: #application_security #code_analysis #devsecops #sast #cybersecurity

Medium

Fortify-Open Text SAST Detailed Installation Guide (Windows & Linux)

Contents

17 views14:04

Daily Writeups

⤷ Title: SadGuard: Dynamic Code Analysis + Supply Chain Detection Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:16:13 +0000
════════════════════════
⌗ Tags: #Code Assessment #Vulnerability Assessment #AI #CI/CD #code analysis #cybersecurity #Malware Detection #Pull Request Security #SadGuard #Self_Hosted #Software Development #Supply Chain Security

Penetration Testing Tools

SadGuard: Dynamic Code Analysis + Supply Chain Detection Attack

SadGuard leverages AI to secure software supply chains, detecting malicious code in pull requests via diff analysis & runtime monitoring.

23 views09:08

Daily Writeups

⤷ Title: Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:20:57 +0000
════════════════════════
⌗ Tags: #Open Source Tool #code analysis #cybersecurity #Debuggers #Hollowise #Network Analysis #Offensive Security #PPID Spoofing #Process Hollowing #Stealth Execution #windows

Penetration Testing Tools

Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing

Hollowise is a Windows tool enabling stealthy execution of debuggers and code/network analyzers by process hollowing suspended processes and spoofing their parent IDs.

16 views23:07

Daily Writeups

⤷ Title: Jxscout: Unleash JavaScript’s Hidden Vulnerabilities with This Powerful Analysis Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 00:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AST #Burp Suite #Caido #code analysis #JavaScript #jxscout #Penetration Testing #security tool #Source Maps #Vite #Vulnerability Research #Webpack

Penetration Testing Tools

Jxscout: Unleash JavaScript's Hidden Vulnerabilities with This Powerful Analysis Tool

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

41 views01:03

About

Blog

Apps

Platform