Title here
Summary here
Blog
Buffer Overflow with emojis?
July 15, 20253 minutes
Last weekend, at a CTF (l3ack ctf 2025), I came across a simple ret2win, or so it seemed. The code had a gets that stored the input in a 272-character buffer, and there was also a win function that ran /bin/sh, but there was a problem… On the server, the binary wasn’t run directly: the input first went through a Python script that contained the following:
Integer Overflow
February 24, 20252 minutes
Why is 4294967295 + 1 equal to 0? You will find out in this post...
Decoding and encoding base64 with pen and paper
June 13, 20241 minute
Base64 is well known and widely used, but have you ever wondered how to decode/encode it by hand?
Learn SQLi (MySQL)
December 19, 2023 in Ciberseguridad23 minutes
Learn SQLi with examples and Docker containers to practice everything as you go. Throughout the post you will learn 3 types of SQLi: time-based, UNION-based and boolean-based
Reverse shell with the USB Rubber Ducky
February 5, 20232 minutes
We are going to prepare the USB Rubber Ducky with a payload that will let us get a reverse shell from a Windows machine with Windows Defender enabled
Phishing
February 4, 20235 minutes
Phishing cases in Spain rose by 30% in 2022. But do you know what they are? What types are there? How are they done? How can you protect yourself?
Watch out for this USB!
December 5, 20224 minutes
The Rubber Ducky is a USB stick with some special features. Unlike a normal USB stick, where you can store files, photos, etc., the Rubber Ducky is a device that injects predefined keystrokes.
Polybar Spotify Module
November 29, 20224 minutes
If you use polybar, you have probably thought about adding a module to control Spotify and see which song is playing. In this post you will learn how to do it
How to Customize Your Linux Environment
November 25, 2022 in Linux5 minutes
The default desktop environments in pentesting distributions like Kali or Parrot are not very productive. In this post you will see an example of a tiling window manager called bspwm, which will make you much more productive and faster at your work