https://manwiththe0xhex.github.io/Practical cybersecurity blog focused on CTFs, web exploitation, vulnerability analysis, and reversing. 2026-03-23T10:43:42-05:00 jounior Z. https://manwiththe0xhex.github.io/ Jekyll © 2026 jounior Z. /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-03-23T09:42:12-05:00 2026-03-23T10:03:03-05:00 https://manwiththe0xhex.github.io/posts/guia-basica-de-tcpdump/ jounior Z.

Introducción En el amplio mundo de las redes, la capacidad de analizar y comprender el tráfico de red es fundamental para administradores de sistemas, ingenieros de red y profesionales de seguridad informática. Una herramienta esencial para analisis de redes es tcpdump. TCPDump es una herramienta que es usada para analizar los paquetes de datos en una red, nos permite capturar y examinar los p...

2026-03-22T19:09:39-05:00 2026-03-23T10:43:13-05:00 https://manwiththe0xhex.github.io/posts/Hidden-Cipher-1/ jounior Z.

1. File download: hiddencipher.zip File Analysis Initial identificacion of binery shows it is a x64-bit linux executable that has been stripped. ❯ file hiddencipher hiddencipher: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), statically linked, no section header Continue with analsys we use pwntool to gather more informacion. Analysing the results we notice hiddencipher file was...

2026-03-22T17:55:23-05:00 2026-03-23T00:10:32-05:00 https://manwiththe0xhex.github.io/posts/Gatekeeper/ jounior Z.

1. File download: gatekeeper File Analysis Initial identification of the binary shows it is a standard 64-bit Linux executable. The fact that it is not stripped is helpful, as it likely contains debugging symbols that make analysis easier. file gatekeeper gatekeeper: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildI...

2026-03-22T16:22:14-05:00 2026-03-22T22:51:17-05:00 https://manwiththe0xhex.github.io/posts/Secret-Box/ jounior Z.

Web Recon The application provides a user registration and login system. Once authenticated, users can store private “secrets” in a personal vault. Initial testing confirmed that secrets are saved and displayed correctly. Source Code Analysis A review of the backend source code revealed two critical security flaws: server.js: The function responsible for saving secrets takes the user inp...

2026-03-22T09:52:17-05:00 2026-03-22T09:52:17-05:00 https://manwiththe0xhex.github.io/posts/ORDER-ORDER/ jounior Z.

Web Recon The application serves as an expense tracking system with user registration and authentication. After logging in, users can add expenses and generate a downloadable CSV report. Vulnerability Discovery (Second-Order SQLi) Initial testing for SQL injection by injecting a single quote (') into various input fields revealed an error-based vulnerability specifically within the usern...