What happens if an app without READ_CONTACTS asks Google Messages for Android to load a Contacts photo for it? The vulnerability I found did exactly that: before it was fixed, Messages read the protected ph...
Security research notebook
Vulnerability research, exploit chains, and CTF field notes.
@devploit / blog
Real-world infosec, no hype. Original findings, reproducible proofs of concept, and postmortems built for people who want the technical details.
// notebook status
3 Published writeups
3 Research tracks
17 Indexed tags
Focused notes from vulnerability research, offensive security work, and competitions.
// recent research
Operational notes from the field.
DEFCON Quals 2025 - Memory Bank CTF Challenge Writeup
Introduction As a web hacking enthusiast, I typically focus on web-based CTF challenges. However, due to the lack of such challenges in DEFCON Quals 2025, I decided to tackle the Memory Bank challenge, whic...
- 1
- 1 / 1