NĐNguyễn Đăng Hưnginbluecyber.hashnode.dev·7h ago · 36 min readBeyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine0. Overview This report details a targeted cyber-espionage campaign conducted by the Russia-aligned threat actor group APT SHADOW-EARTH-066 (also tracked by CERT-UA as UAC-0226), delivering an updated00
RPRudra Ponksheinblog.realrudrap.dev·6h ago · 11 min readSealed with a KYSS: Inside an Android Banking RATAfter wrapping the analysis on my previous sample, another one came in. It called itself KYSS, and the launcher icon was a lipstick-stained kiss mark, the kind of lure which gets people's attention. T00
NRNischay Rajinn404r-truecaller.hashnode.dev·2d ago · 12 min readHow I Reverse Engineered the Truecaller Android App⚠️ Disclaimer & Proof of Concept The information, techniques, and code provided in this article are strictly for educational purposes, defensive security research, and API auditing. All testing was co00
SSShaheer Sarfarazindakheera47.hashnode.dev·2d ago · 13 min readI Was Looking for the Network TabI had an Android APK and an objective: I wanted to understand what the application downloaded and save that data in a usable offline format. My work so far has mostly been in web development, so I app00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 14 · 3 min readCTF Writeup: Negative Bread | RE | Beginner | BroncoCTF 2026Description Your account starts at $100. The flag costs $1,000,000. Deposits are capped. Withdrawals can't go below zero. No strings attached. We don't even need to guard the vault. This bank is impe00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 12 min readCTF Writeup: C++ Unplugged | RE | BroncoCTF 2026Description I can understand getting a song stuck in your head, but when your life revolves around music so much that you start writing code using song titles, there may be a problem. I mean, what do00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 4 min readCTF Writeup: Mirror Mirror | RE | BroncoCTF 2026Description I've been told that this magic mirror will only clear when I give it the flag. Can you help me figure out what I should say? We're given: mirror.py Overview This challenge revolves arou00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 6 min readCTF Writeup: Cat Simulator | RE | BroncoCTF 2026Description Make the purrfect choices over 5 days to win your owner's heart… and maybe something more? Meow carefully. We're given: cat-sim-mac Overview This challenge is a "cat simulator" CLI game00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 7 min readBroncoCTF : Atomic Substitution Theory WriteupChallenge We're given secret.txt, a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2, 15), (4, 9), { , (3, 2, 1), (5, 3), _ , (2, 17), ... 11A
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 5 min readBroncoCTF : Negative Bread WriteupChallenge We're given a single ELF binary, bank: $ file bank bank: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, not stripped Runni00
