River

Building a ROP chain to call system() with a custom string argument

Classic buffer overflow exploiting a vulnerable read() to redirect execution to a win function

Security analysis of XML-RPC misconfiguration and publicly accessible staging environment in WordPress deployment

Process Over Product

Intercepting & monitoring Windows API calls to find a flag in a hidden buffer

Bypassing sleep functions using Frida

Reversing decompiled C++ code to extract a flag by tracing string manipulation logic

Abusing XSS, LFI, and misconfigured Linux permissions

Bypassing an infinite debugger-killing loop by NOP'ing an unconditional jump

Further bypassing anti-debugging checks by editing register values