Samy Security Blog

Crack Me 3 - Reverse Engineering Challenge The challenge involved reverse-engineering a compiled 64-bit ELF PIE executable to extract an encoded flag hidden in memory.

3 scary tools that use Shodan search engine.

Did you know that professional hackers are also excellent magicians?

3 ways to become root by exploiting the .bashrc file You did it!

Ivacy - The most secure VPN?

Build Your Own WiFi Pineapple Tetra for $7!

JabberJaw – Convert your Router to a Portable Network Attack Device!

[CVE-2021-37289] A Hidden Web Shell Discovered in the Planex MZK-DP150N Plug-in Wireless LAN Router.

Simple Cipher - Cryptography Challenge For this challenge we’re given the following string to decode: ebg kvvv vf n fvzcyr yrggre fhofgvghgvba pvcure gung ercynprf n yrggre jvgu gur yrggre kvvv yrggref nsgre vg va gur nycunorg. ebg kvvvvf narknzcyr bs gur…

Hackermon - Web Challenge This new challenge is based on the re-code of the Pokemon battle interface.

Hacker Kombat (THE GAME) - Web Challenge For this challenge as the description tells us, we should “Win an unwinnable game to receive the flag!”

Zipper - Steganography Challenge For this challenge we can download an image called "zipper_1_.jpg".

Unsecured - Trivia Challenge For this challenge, a web page with several access points are displayed.

Knil.click, secure any URL or Qr Code with a password!

Pug a Plenty - Web Challenge In this challenge we are asked to pet a dog several times in a very short period (only a few seconds) to get the flag.

Not So Simple Cipher - Cryptography Challenge For this challenge we have a file that contains a long string of characters.

I Love Listings - Reconnaissance Challenge For this really easy challenge we can download a compressed zip file called "CTF_1.zip".

Flask Task - Web Challenge On this challenge, the platform seems to be an e-commerce website.

Damn Cheap Cipher 2 - Cryptography Challenge For this challenge we have a file that contains the following string: YmVnaW4gNjQ0IDxkYXRhPiA2MURRITFVXU48JjFLODZNVzpWLUk5Jk1EPiYlQSJAYGAgYCBlbmQK After analysis, I could determinate that the string is encoded…

CTF Flag Mart - Web Challenge For this challenge we are asked to become admin to get the flag, information that can be checked on the page service.html where the sentence "If you were 'admin' there'd be a pretty flag right here" is showed.

Crack Me 2 - Reverse Engineering Challenge For this challenge we can download a compiled C file called "crackme2_1.out".

Crack Me 1 - Reverse Engineering Challenge For this challenge we can download a compiled C file called "crackme1_1.out".

Bob’s Cap - Forensics Network Challenge For this challenge we can download a packet capture file called "bob_1.pcapng".

Emoji - Forensics Challenge For this challenge a JavaScript file is provided.