0xlibris Blog – 0xlibris

Analyzing the Infection Chain of a Stealer Malware

I am not a robot

malware

reversing

cyberchef

In this analysis, I’ll walk through a sophisticated infection chain used to deliver stealer malware. This multi-stage attack begins with a seemingly legitimate website and…

Carrot

MetaCTF February 2025 Flash CTF

CTF

reversing

radare2

ghidra

anti-debugging

This is my solution to the reversing challenge from the Meta Flash CTF of February 2025, titled “Carrot.”

I Heard You Liked Loaders

MetaCTF January 2025 Flash CTF

CTF

reversing

radare2

gdb

anti-debugging

This is my solution to the reversing challenge from the Meta Flash CTF of January 2025, titled “I Heard You Liked Loaders.”

Flare-On 11 Challenge 5: sshd

if only it were that easy……

flareon

reversing

ghidra

radare2

CTF

gdb

This year marked my first attempt at the Flare-On, and it’s been a wild ride. Surprisingly, I solved the first four challenges the first weekend, way faster than I expected…

Reversing a Digispark badusb with Radare2 [3/3]

reversing

hardware

badusb

digispark

radare2

duckify

avr

attiny85

This post is the continuation of How to safely investigate an unknown and potentially malicious USB device [1/3] and From sadusb to badusb. Building an internal SOC exercise…

From sadusb to badusb. Building an internal SOC exercise [2/3]

let’s have fun

hardware

badusb

digispark

duckify

CTF

After my failed attempts at reading the contents of a suspicious USB device, I decided to change the hat and use the badusb for my own evil purposes.

How to safely investigate an unknown and potentially malicious USB device [1/3]

and failing miserably

reversing

hardware

badusb

digispark

attiny85

avr

One day, I was playing around at the office with Flipper Zero’s “bad USB” mode. A colleague saw me and, while talking about USB sticks / ducks, he gave me one that was lost…