https://d3bo.eu/en/blog/Recent content in Blog on d3boHugo -- gohugo.ioenCopyright (c) 2025 HyasThu, 07 Sep 2023 16:21:44 +0200https://d3bo.eu/en/blog/buffer-overflow-with-emojis/Tue, 15 Jul 2025 00:00:00 +0000https://d3bo.eu/en/blog/buffer-overflow-with-emojis/Last weekend, at a CTF (l3ack ctf 2025), I came across a simple ret2win, or so it seemed. The code had a gets that stored the input in a 272-character buffer, and there was also a win function that ran /bin/sh, but there was a problem… On the server, the binary wasn’t run directly: the input first went through a Python script that contained the following:https://d3bo.eu/en/blog/integer-overflow/Mon, 24 Feb 2025 00:00:00 +0000https://d3bo.eu/en/blog/integer-overflow/Why is 4294967295 + 1 equal to 0? You will find out in this post…https://d3bo.eu/en/blog/decoding-and-encoding-base64-with-pen-and-paper/Thu, 13 Jun 2024 00:00:00 +0000https://d3bo.eu/en/blog/decoding-and-encoding-base64-with-pen-and-paper/Base64 is well known and widely used, but have you ever wondered how to decode/encode it by hand?https://d3bo.eu/en/blog/learn-sqli-mysql/Tue, 19 Dec 2023 00:00:00 +0000https://d3bo.eu/en/blog/learn-sqli-mysql/Learn SQLi with examples and Docker containers to practice everything as you go. Throughout the post you will learn 3 types of SQLi: time-based, UNION-based and boolean-basedhttps://d3bo.eu/en/blog/reverse-shell-with-the-usb-rubber-ducky/Sun, 05 Feb 2023 00:00:00 +0000https://d3bo.eu/en/blog/reverse-shell-with-the-usb-rubber-ducky/We are going to prepare the USB Rubber Ducky with a payload that will let us get a reverse shell from a Windows machine with Windows Defender enabledhttps://d3bo.eu/en/blog/phishing/Sat, 04 Feb 2023 00:00:00 +0000https://d3bo.eu/en/blog/phishing/Phishing cases in Spain rose by 30% in 2022. But do you know what they are? What types are there? How are they done? How can you protect yourself?https://d3bo.eu/en/blog/watch-out-for-this-usb/Mon, 05 Dec 2022 00:00:00 +0000https://d3bo.eu/en/blog/watch-out-for-this-usb/The Rubber Ducky is a USB stick with some special features. Unlike a normal USB stick, where you can store files, photos, etc., the Rubber Ducky is a device that injects predefined keystrokes.https://d3bo.eu/en/blog/polybar-spotify-module/Tue, 29 Nov 2022 00:00:00 +0000https://d3bo.eu/en/blog/polybar-spotify-module/If you use polybar, you have probably thought about adding a module to control Spotify and see which song is playing. In this post you will learn how to do ithttps://d3bo.eu/en/blog/how-to-customize-your-linux-environment/Fri, 25 Nov 2022 00:00:00 +0000https://d3bo.eu/en/blog/how-to-customize-your-linux-environment/The default desktop environments in pentesting distributions like Kali or Parrot are not very productive. In this post you will see an example of a tiling window manager called bspwm, which will make you much more productive and faster at your work