Dynamic Secret

Use strace to trace the runtime syscalls of a binary and read the secret it loads from a file.

February 28, 2026 · 2 min · giordii

Bash Filter Bypass via Unicode Lookalikes

Bypass a character-level bash filter by substituting ASCII letters with Unicode homoglyphs that the shell normalizes.

March 1, 2025 · 3 min · giordii

Basic Calculator — Variable Shadowing Bug

Identify and work around a Python variable shadowing bug where a function definition overwrites a string variable of the same name.

January 1, 2025 · 3 min · giordii

Unzip Matryoshka — 3000 Nested Zip Files

Automate extraction of 3000 nested zip files to retrieve the flag from the innermost archive.

January 1, 2025 · 2 min · giordii

2048 — Arithmetic Server Bot

Connect to a server that fires 2049 arithmetic challenges in Italian — SOMMA, DIFFERENZA, PRODOTTO, POTENZA, DIVISIONE_INTERA — and solve each one in under the timeout to receive the flag.

January 1, 2024 · 2 min · giordii

Based and Encoded — Multi-Format Encoding Bot

A JSON-framed server demands conversions between base64, hex, and binary in both encode and decode directions. Write a bot that parses the Italian operation description and returns the correct transformed value.

January 1, 2024 · 3 min · giordii

Byte Flag — Flag Hidden in Raw PNG Bytes

Open the PNG in binary mode, locate the ASCII string ‘flag’ in the raw byte stream, and print every byte after that index — the flag is embedded verbatim in the file’s binary content.

January 1, 2024 · 1 min · giordii

Corrupted Flag — Fix GIF Magic Bytes then Extract Frames

The GIF has wrong magic bytes at the start. Replace the first 13 bytes with the correct GIF89a header, open the repaired file with Pillow, and iterate through frames saved as WebP to find the flag.

January 1, 2024 · 2 min · giordii

Dashed — Six-Layer Encoding Chain: Morse → Hex → Binary → Base64 → Caesar

Decode a Morse code file, strip hex prefixes, convert to binary, interpret as Base64, then apply a Caesar shift derived from the first character — five transforms chained together.

January 1, 2024 · 3 min · giordii

Suoni Misteriosi — Morse Audio Decoder

A WAV file carries the flag in Morse code audio. Decode it automatically with morse-audio-decoder and wrap the result in flag{…}.

January 1, 2024 · 1 min · giordii