https://hanhpp.github.io/tags/ctf/Recent content in Ctf on Hanh Pham's BlogHugoen-usSat, 29 Aug 2026 15:00:00 +0700https://hanhpp.github.io/posts/how-i-started-learning-reverse-engineering/Sat, 29 Aug 2026 15:00:00 +0700https://hanhpp.github.io/posts/how-i-started-learning-reverse-engineering/I spent my first month with Ghidra staring at assembly I didn’t understand, convinced I was too stupid for this. Here’s the honest version of how I got from ‘what is a register’ to solving CTF reversing challenges, and the mistakes that cost me weeks.https://hanhpp.github.io/posts/anti-debugging-tricks/Thu, 27 Aug 2026 11:00:00 +0700https://hanhpp.github.io/posts/anti-debugging-tricks/Some binaries detect that you’re debugging them and crash, change behavior, or hide the flag. This post covers the common anti-debugging techniques and how to bypass them.https://hanhpp.github.io/posts/custom-vms-in-ctf/Tue, 25 Aug 2026 10:00:00 +0700https://hanhpp.github.io/posts/custom-vms-in-ctf/Some CTF reversing challenges hide the flag behind a custom virtual machine: a program that interprets its own bytecode. This post shows you how to spot them, reverse the instruction set, and write a solver.https://hanhpp.github.io/posts/your-first-crackme-walkthrough/Sat, 22 Aug 2026 14:00:00 +0700https://hanhpp.github.io/posts/your-first-crackme-walkthrough/A crackme is a small binary that asks for a password and checks your input. This post walks through solving one, from downloading the binary to extracting the flag, with every tool click explained so you can follow along.https://hanhpp.github.io/posts/ghidra-in-30-minutes/Tue, 18 Aug 2026 11:00:00 +0700https://hanhpp.github.io/posts/ghidra-in-30-minutes/Ghidra’s decompiler turns machine code into something that looks like C. But the output is full of strange variable names, weird casts, and functions that look nothing like what you’d write. Here’s how to read it anyway.