<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Home on Vladimir Albu</title>
    <link>https://header.ro/</link>
    <description>Recent content in Home on Vladimir Albu</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en-gb</language>
    <lastBuildDate>Fri, 08 May 2026 00:48:00 +0300</lastBuildDate><atom:link href="https://header.ro/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>teleporter - ROCSC 2026 Finals</title>
      <link>https://header.ro/posts/teleporter/</link>
      <pubDate>Fri, 08 May 2026 00:48:00 +0300</pubDate>
      
      <guid>https://header.ro/posts/teleporter/</guid>
      
      <description>&lt;p&gt;Exploitable Minecraft server plugin that allows players to teleport to each other&lt;/p&gt;
&lt;h1 id=&#34;introduction&#34;&gt;Introduction&lt;/h1&gt;
&lt;p&gt;Teleporter is a CTF task that I created for the final phase of the Romanian Cyber Security Challenge 2026 (ROCSC).
It involved exploiting bugs in a teleportation feature provided by a Minecraft Java Edition server plugin.&lt;/p&gt;
&lt;h1 id=&#34;task-description&#34;&gt;Task description&lt;/h1&gt;
&lt;p&gt;We Need to Go Deeper&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Version:&lt;/strong&gt; Java 1.21.11&lt;/p&gt;
&lt;p&gt;Author: Albu Vladimir&lt;br&gt;
Category: Misc&lt;br&gt;
Difficulty: Medium&lt;/p&gt;
&lt;p&gt;&lt;a href=&#34;https://header.ro/posts/teleporter/teleporter-1.0.0.jar&#34;&gt;Attachment&lt;/a&gt;&lt;/p&gt;
&lt;h1 id=&#34;overview&#34;&gt;Overview&lt;/h1&gt;
&lt;p&gt;We are given a JAR file containing what seems to be a Minecraft PaperMC server plugin, as well
as a server instance to connect to, version being Java 1.21.11.&lt;/p&gt;</description>
      
    </item>
    
    <item>
      <title>SimpleNote Writeup - BlitzCTF 2025</title>
      <link>https://header.ro/posts/simplenote/</link>
      <pubDate>Tue, 08 Jul 2025 14:00:25 +0300</pubDate>
      
      <guid>https://header.ro/posts/simplenote/</guid>
      
      <description>&lt;p&gt;UAF-vulnerable note taking app that uses calloc and modern glibc&lt;/p&gt;
&lt;h1 id=&#34;task-description&#34;&gt;Task description&lt;/h1&gt;
&lt;p&gt;Just simple note &amp;hellip;&lt;/p&gt;
&lt;p&gt;Author: kuvee&lt;br&gt;
Category: Pwn&lt;/p&gt;
&lt;p&gt;&lt;a href=&#34;https://header.ro/posts/simplenote/simplenote.rar&#34;&gt;Attachment&lt;/a&gt;&lt;/p&gt;
&lt;h1 id=&#34;overview&#34;&gt;Overview&lt;/h1&gt;
&lt;p&gt;This is a pwn challenge which has a note system, often met at heap challenges. We are given the option to create, edit, show and delete chunks. There is also a secret function which allows us to get a leak. All protections are enabled and the binary uses a modern libc version. The creation of chunks is done via calloc, which doesn&amp;rsquo;t look in the tcache directly and also fills the allocated chunk with zeroes. We are also limited to 7 entries in our pointer list, which suggests that we can only have 7 chunks allocated.&lt;/p&gt;</description>
      
    </item>
    
    <item>
      <title>Brave Traveler Official Writeup - TFC CTF 2024</title>
      <link>https://header.ro/posts/bravetraveler/</link>
      <pubDate>Sun, 04 Aug 2024 14:00:00 +0300</pubDate>
      
      <guid>https://header.ro/posts/bravetraveler/</guid>
      
      <description>&lt;p&gt;Simple reverse engineering task I made that uses BFS algorithm to generate output (OLD)&lt;/p&gt;
&lt;h1 id=&#34;task-description&#34;&gt;Task description&lt;/h1&gt;
&lt;p&gt;There&amp;rsquo;s a whole world left to explore.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Don&amp;rsquo;t forget the flag format&lt;/strong&gt;: &lt;code&gt;TFCCTF{stringOfText}&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;Author: header&lt;br&gt;
Category: Reverse Engineering&lt;/p&gt;
&lt;p&gt;&lt;a href=&#34;https://header.ro/posts/bravetraveler/travel&#34;&gt;Attachment&lt;/a&gt;&lt;/p&gt;
&lt;h1 id=&#34;writeup&#34;&gt;Writeup&lt;/h1&gt;
&lt;h2 id=&#34;explanation-of-the-code&#34;&gt;Explanation of the code&lt;/h2&gt;
&lt;p&gt;The program starts by making a &lt;strong&gt;vector&lt;/strong&gt; with type &lt;strong&gt;set&lt;/strong&gt; of size 128.&lt;/p&gt;
&lt;div class=&#34;highlight&#34;&gt;&lt;pre tabindex=&#34;0&#34; class=&#34;chroma&#34;&gt;&lt;code class=&#34;language-c++&#34; data-lang=&#34;c++&#34;&gt;&lt;span class=&#34;line&#34;&gt;&lt;span class=&#34;cl&#34;&gt;&lt;span class=&#34;n&#34;&gt;vector&lt;/span&gt;&lt;span class=&#34;o&#34;&gt;&amp;lt;&lt;/span&gt;&lt;span class=&#34;n&#34;&gt;set&lt;/span&gt;&lt;span class=&#34;o&#34;&gt;&amp;lt;&lt;/span&gt;&lt;span class=&#34;kt&#34;&gt;char&lt;/span&gt;&lt;span class=&#34;o&#34;&gt;&amp;gt;&amp;gt;&lt;/span&gt; &lt;span class=&#34;n&#34;&gt;v&lt;/span&gt;&lt;span class=&#34;p&#34;&gt;(&lt;/span&gt;&lt;span class=&#34;mi&#34;&gt;128&lt;/span&gt;&lt;span class=&#34;p&#34;&gt;);&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;It calls the function generateMap() with a pointer to the vector v as argument.&lt;/p&gt;
&lt;div class=&#34;highlight&#34;&gt;&lt;pre tabindex=&#34;0&#34; class=&#34;chroma&#34;&gt;&lt;code class=&#34;language-c++&#34; data-lang=&#34;c++&#34;&gt;&lt;span class=&#34;line&#34;&gt;&lt;span class=&#34;cl&#34;&gt;&lt;span class=&#34;n&#34;&gt;generateMap&lt;/span&gt;&lt;span class=&#34;p&#34;&gt;(&lt;/span&gt;&lt;span class=&#34;n&#34;&gt;v&lt;/span&gt;&lt;span class=&#34;p&#34;&gt;);&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;In the function, we have many modifications to the vector v. The first two are:&lt;/p&gt;</description>
      
    </item>
    
    <item>
      <title>About</title>
      <link>https://header.ro/pages/about/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      
      <guid>https://header.ro/pages/about/</guid>
      
      <description>&lt;p&gt;My name is Vladimir Albu. I am a high school student, cybersecurity enthusiast and CTF player.&lt;br&gt;
I am the captain of a Romanian CTF team called &amp;ldquo;OctalO&amp;rdquo; (&lt;a href=&#34;https://ctftime.org/team/269207&#34;&gt;CTFtime&lt;/a&gt;)&lt;br&gt;
Currently learning more web application penetration testing and binary exploitation.&lt;/p&gt;
&lt;h1 id=&#34;certifications-and-associated-skills&#34;&gt;Certifications and associated skills&lt;/h1&gt;
&lt;ul&gt;
&lt;li&gt;Burp Suite Certified Practitioner (BSCP) - &lt;a href=&#34;https://portswigger.net/web-security/e/c/c70fb42d7d7c3809&#34;&gt;View certification&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;Burp Suite&lt;/li&gt;
&lt;li&gt;Web Application Security&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;h1 id=&#34;awards-and-achievements&#34;&gt;Awards and achievements&lt;/h1&gt;
&lt;p&gt;This includes competitions and extracurricular activities&lt;/p&gt;
&lt;h2 id=&#34;2026&#34;&gt;2026&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;🥈 Silver medalist at the &lt;strong&gt;International Cybersecurity Olympiad (ICO)&lt;/strong&gt;, 11th place world-wide&lt;/li&gt;
&lt;li&gt;🇷🇴 Member of Team Romania at the &lt;strong&gt;European Cybersecurity Challenge (ECSC)&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;🍊 Participated in the ROCSC Bootcamp (ECSC qualifiers)&lt;/li&gt;
&lt;li&gt;🥇 1st place at the Romanian National Cyber Security Olympiad (overall)&lt;/li&gt;
&lt;li&gt;✍️ Challenge author at ROCSC 2026 Finals&lt;/li&gt;
&lt;li&gt;🥇 1st place at the Romanian Regional Cyber Security Olympiad (overall)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id=&#34;2025&#34;&gt;2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;🥇 2nd place internationally, best romanian team - &lt;strong&gt;DefCamp CTF 2025 Finals&lt;/strong&gt; (Team OctalO) (fun fact: because the organizers forgot to unfreeze the leaderboard, they thought we won 1st place internationally and awarded us on-stage, only to find out later that TRX actually won)&lt;/li&gt;
&lt;li&gt;🇷🇴 Member of Team Romania at &lt;strong&gt;ECSC&lt;/strong&gt; (backup player)&lt;/li&gt;
&lt;li&gt;🚩 Qualified for the DefCamp CTF finals by obtaining 4th place out of 491 teams at TFC CTF 2025 (Team OctalO)&lt;/li&gt;
&lt;li&gt;📜 BSCP certified&lt;/li&gt;
&lt;li&gt;🌲 Participated in the ROCSC Bootcamp (ECSC qualifiers)&lt;/li&gt;
&lt;li&gt;🥈 2nd place at the Romanian National Cyber Security Olympiad (10th grade)&lt;/li&gt;
&lt;li&gt;🥇 1st place at UNbreakable Romania Team Finals (high school), 2nd overall, (Team &amp;ldquo;hex on the beach&amp;rdquo;)&lt;/li&gt;
&lt;li&gt;🚩 4th place (high school) at UNbreakable Romania Individual (9th overall)&lt;/li&gt;
&lt;li&gt;🥇 1st place at the Romanian Regional Cyber Security Olympiad (10th grade), 2nd overall&lt;/li&gt;
&lt;li&gt;🚩 Qualified for ROCSC Finals (6th on junior category, 10th overall)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id=&#34;2024&#34;&gt;2024&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;✍️ Challenge author at TFC CTF 2024, organized by Romania&amp;rsquo;s best CTF team&lt;/li&gt;
&lt;li&gt;🌲 Participated in the ROCSC Bootcamp (ECSC qualifiers)&lt;/li&gt;
&lt;li&gt;🥇 1st place at the Romanian National Cyber Security Olympiad (9th grade)&lt;/li&gt;
&lt;li&gt;🥇 1st place at the Romanian Regional Cyber Security Olympiad (9th grade), 5th overall&lt;/li&gt;
&lt;/ul&gt;</description>
      
    </item>
    
  </channel>
</rss>
