# Notes

## Research

- [Introduction](https://kos0ng.gitbook.io/notes/introduction.md)
- [2024](https://kos0ng.gitbook.io/notes/research/2024.md)
- [Reverse Engineering APK Built with Flutter](https://kos0ng.gitbook.io/notes/research/2024/reverse-engineering-apk-built-with-flutter.md): Study case on ADDA CTF 2022 Quals (Hidden Gold Oasis) and FindIT 2023 Final (kurang hoki). --------To be Updated--------
- [Reverse Engineering Application Protected with Pyarmor](https://kos0ng.gitbook.io/notes/research/2024/reverse-engineering-application-protected-with-pyarmor.md): Study case pyarmor obfuscation on windows, linux, and macos environment
- [Android Reverse Engineering (Native Library Analysis)](https://kos0ng.gitbook.io/notes/research/2024/android-reverse-engineering-native-library-analysis.md): Study case Final Grey Cat CTF 2023 (title)
- [Malware Analysis: Wedding Invitation Scam](https://kos0ng.gitbook.io/notes/research/2024/malware-analysis-wedding-invitation-scam.md): Analyzing scam in Indonesia named "Wedding Invitation"
- [2023](https://kos0ng.gitbook.io/notes/research/2023.md)
- [Analyzing CVE-2021-22204 Based on Network Traffic (PCAP file)](https://kos0ng.gitbook.io/notes/research/2023/analyzing-cve-2021-22204-based-on-network-traffic-pcap-file.md): Study case Intechfest CTF 2023 (breached)
- [Emulating Android Native Library using Qiling - Part 1](https://kos0ng.gitbook.io/notes/research/2023/emulating-android-native-library-using-qiling-part-1.md): Study case ADDA CTF 2022 (wonder maze)
- [Machine Learning Model (XGBoost) Reverse Engineering](https://kos0ng.gitbook.io/notes/research/2023/machine-learning-model-xgboost-reverse-engineering.md): Study Case IDSECCONF CTF 2023 - PakBoost Challenge
- [CVE-2021-2461](https://kos0ng.gitbook.io/notes/research/2023/cve-2021-2461.md): Parameter Pollution Lead to Application Takeover
- [CVE-2022-31367](https://kos0ng.gitbook.io/notes/research/2023/cve-2022-31367.md): Column Injection on Filter Feature Lead to Data Leak
- [CVE-2023-0046](https://kos0ng.gitbook.io/notes/research/2023/cve-2023-0046.md): Unrestricted Logging Filename Lead to Remote Code Execution
- [CVE-2023-0048](https://kos0ng.gitbook.io/notes/research/2023/cve-2023-0048.md): Lack of Input Sanitation Lead to Remote Code Execution
- [CVE-2023-0316](https://kos0ng.gitbook.io/notes/research/2023/cve-2023-0316.md): Local File Read through Improper Filename Validation
- [2022](https://kos0ng.gitbook.io/notes/research/2022.md)
- [Attacking Non Avalanche AES (Custom AES Implementation)](https://kos0ng.gitbook.io/notes/research/2022/attacking-non-avalanche-aes-custom-aes-implementation.md): Study case Intechfest 2022 (prospero)
- [Cracking CRC32 with Forward Polynomial Constant](https://kos0ng.gitbook.io/notes/research/2022/cracking-crc32-with-forward-polynomial-constant.md): Study case Intechfest 2022 (see are see)
- [Cheating Game Built with WASM](https://kos0ng.gitbook.io/notes/research/2022/cheating-game-built-with-wasm.md): Study case NCW 2022 Quals (Flaggy Bird V2).
- [Reverse Engineering Game Boy](https://kos0ng.gitbook.io/notes/research/2022/reverse-engineering-game-boy.md): Study case NCW 2022 Final (80's)
- [Partial Known Plaintext Attack on Custom 3DES](https://kos0ng.gitbook.io/notes/research/2022/partial-known-plaintext-attack-on-custom-3des.md): Study case Compfest 2022 Quals (3(3DES))
- [2021](https://kos0ng.gitbook.io/notes/research/2021.md)
- [Reverse Engineering Erlang BEAM File](https://kos0ng.gitbook.io/notes/research/2021/reverse-engineering-erlang-beam-file.md): Study case Cyber Jawara 2021 Quals (Laser)
- [Reverse Engineering Approach on Python Bytecode with Development Version](https://kos0ng.gitbook.io/notes/research/2021/reverse-engineering-approach-on-python-bytecode-with-development-version.md): Study case MDT4.0 Quals (ResidentSleeper)