https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/ Recent content in Reversing on Th3B0yWh0L1v3d — Security Writeups Hugo en-us Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/baby-android/ Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/baby-android/ A single APK whose UI claims there’s nothing to see — the flag is split into three pieces hidden in a MainActivity field, a string resource, and a Compose theme getter. https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/bit-miner/ Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/bit-miner/ An idle/clicker TCP game whose shop checks affordability against a stale cached balance but deducts from a fresh re-read; racing two sessions as the same user underflows an unsigned long to ~1.8e19 bits and buys the flag. https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/do-you-know-the-way/ Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/do-you-know-the-way/ A UPX-packed, unstripped crackme lays its 44-byte check out as 44 independent per-character functions; emulating each with Unicorn brute-forces the flag one byte at a time, sidestepping a rand()-based anti-dynamic trap. https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/haskell2/ Sat, 06 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/dalctf-2026/reversing/haskell2/ A stripped compiler for an invented language is reverse-engineered from its error strings and codegen templates; the recovered grammar exposes an intended read file primitive that simply prints flag.txt — no exploit required.