Kerberos - Applied Review
I initially made a blog post called ‘Understanding Kerberoasting’ that I since removed because I feel it didn’t quite go into enough detail and cover …
Gabe's Writeups
A blog where I post notes and CTF Writeups.
Recent Posts
View allMore CSRF and XSS - Applied Review
We have talked about CSRF and XSS before, but here we will focus on exploits in modern web applications that typically require the writing of custom …
Injection Attacks - Applied Review
I am again making an applied review blog post series (and maybe video series) for the modules used to prepare for the CWEE exam. Each one will go over …
eMAPT Exam Review
First, let’s go over some public information about the exam (and others like it) and why you might want to take it. When choosing to take a mobile …
Android - WebViews & CustomTabs
We know that android applications can interact with websites by using an intent with ACTION.VIEW and a URL which will start a browser and load a …
Android - Storage
We will look at how android applications store files and further have access to the file system of the device. We will focus mostly around the …
Android - Services
A service is defined as an application component that can perform long-running operations in the background, not providing a user interface. They are …
Android - Permissions
So far we have only examined whether or not apps are exported. For example, non-exported activities can’t be started and are used by the app …
Android - Broadcast Receivers
Android applications can send and receive broadcast messages from both the operating system and other android applications. For example, the system …
Android - Content and File Providers
A Content Provider presents data to external applications as one or more tables - where a row represents an instance of some type of data that the …