André Baptista

Reverse engineer and exploitation researcher

Bug Bounty Hunter

RCE on Steam Client via buffer overflow in Server Info

Bug Bounty Report

Posted by André on March 15, 2019

GitHub Desktop RCE (OSX)

Bug Bounty Writeup

Posted by André on December 4, 2018

SSRF in Shopify Exchange to RCE

Bug Bounty Report

Posted by André on May 23, 2018

H1-202 CTF - Writeup

Android Reverse Engineering & Web Exploitation

Posted by André on February 23, 2018

H1-212 CTF - Writeup

"Hack your way to NYC this December for h1-212"

Posted by André on November 20, 2017

HXP CTF 2017 - Writeup

Hardened Flag Store - Bypassing FORTIFY_SOURCE with an user-supplied SECCOMP filter

Posted by André on November 19, 2017

H1702 CTF 2017 - Writeups

Android & iOS Reverse Engineering

Posted by André on July 16, 2017

Google CTF - Writeup

Food - Android Reverse Engineering

Posted by André on June 25, 2017