Frida: Java Wrapper vs JNI Interceptor on the Same Call
Lab APK com.lab.jni.trace. Hook NativeBridge.nInit in Java.perform and the Java_* export with Interceptor.attach, then compare argument length and prefix. Console output redacted.
Posts
Why DES and RC4 Still Matter in AD Crypto Discussions
Lab klist encryption types, supported-etype table, GPO ‘Configure encryption types allowed for Kerberos’ — inventory, not cracking.
Web Race Conditions: Coupons, Balances, and Workflows
Lab Go counter without a mutex, then with one; HTTP coupon handler; lost-update logs — no inventory-drain exploit script.
Entitlements and the Simulator Sandbox on a Lab iOS App
codesign -d –entitlements on a self-signed LabSession: get-task-allow, redacted application-identifier, container paths on the simulator, sandbox-exec, deny logs when a file read walks outside the container. cryptid=1 stops the lab.
Kerberos Ticket Times and Checksums for Forensics
Lab klist dump, field-by-field decode of times and checksum types, clock-skew 401 — no ticket-forging steps.
V8 Security Surface Notes for Defenders
d8 toy typed-array lab, LAB_ASSERT bounds throw, optional –allow-natives-syntax DebugPrint — a crash, not an exploit.
apktool Smali: if-eqz Chains That Want to Be a switch
Lab APK with packed-looking if-eqz obfuscation around a 5-way dispatch. apktool smali, jadx Java, reconstruct a packed-switch, plus a planted stack copy crash. Not a commercial packer unpack.
Print Spooler LPE Class Lessons for Operators
Lab spooler service ACL and RPC interface dump, Point-and-Print registry, 7036/808 logs — no spool exploit.