Reverse Engineering

I typed sudo systemctl restart bluetooth, and it ran without asking for a password. Something was wrong. That single observation led through a GTFOBins lookup, a full SSH key redesign, a fight with rrsync, and eventually reading the OpenSSH source itself. The story ends with an unsatisfying twist: my PC powered itself off twice, and I never fully found out why. The trigger: no password prompt Bluetooth was acting up, so I ran sudo systemctl restart bluetooth. It should have asked for my password. It didn’t, and I hadn’t used sudo recently. Something was off, so I ran sudo -n -l (list what I’m allowed to run without a password, without prompting for one). ...

I wanted to save an old chat history with a friend on PlayStation Network (PSN) before it disappeared somewhere. I run the PS App inside Waydroid (a way to run Android on Linux) on my PC. The obvious first move — read the local cache file directly — turned into a longer investigation than expected. The local cache was encrypted Waydroid stores each app’s data under ~/.local/share/waydroid/data/data/<package-name>/, mirroring Android’s own /data partition layout. Inside the PS App’s folder, databases/ had some promising-looking files. ...