Exploring CTFs, exploits, and security research as part of Team NOVA. Hack. Learn. Share.https://spidey.n0va.in/https://spidey.n0va.in/projects/the-hsts-mystery-when-https-isnt-enough/https://spidey.n0va.in/projects/the-hsts-mystery-when-https-isnt-enough/Mon, 12 Jan 2026 00:00:00 GMThttps://spidey.n0va.in/projects/bypassing-flutter-ssl-pinning-using-vpn-config/https://spidey.n0va.in/projects/bypassing-flutter-ssl-pinning-using-vpn-config/Mon, 15 Dec 2025 00:00:00 GMThttps://spidey.n0va.in/projects/drafts/test-pls-ignore/https://spidey.n0va.in/projects/drafts/test-pls-ignore/test pls ignoreWed, 22 Oct 2025 00:00:00 GMThttps://spidey.n0va.in/projects/http-request-smuggling/https://spidey.n0va.in/projects/http-request-smuggling/Fri, 10 Oct 2025 00:00:00 GMThttps://spidey.n0va.in/projects/aidl-hooking/https://spidey.n0va.in/projects/aidl-hooking/Hook AIDL IPC in Android by targeting Proxy (client), Stub (service), or Binder.onTransact for full control over inter-process communication using FridaFri, 08 Aug 2025 00:00:00 GMThttps://spidey.n0va.in/projects/bugbazaar/https://spidey.n0va.in/projects/bugbazaar/Thu, 07 Aug 2025 00:00:00 GMThttps://spidey.n0va.in/projects/mxss/https://spidey.n0va.in/projects/mxss/Know about the parsing magics and mXSSWed, 11 Jun 2025 00:00:00 GMThttps://spidey.n0va.in/projects/tjctf-xss/https://spidey.n0va.in/projects/tjctf-xss/Just a Walkthrough of XSS challenge of TJCTFMon, 09 Jun 2025 00:00:00 GMThttps://spidey.n0va.in/projects/n0psctf/https://spidey.n0va.in/projects/n0psctf/A comprehensive write-up of the N0PS CTF 2025 by Team NOVA, sharing insights and solutions for various challenges tackled during the competition.Sun, 01 Jun 2025 00:00:00 GMThttps://spidey.n0va.in/projects/pentathon2025/https://spidey.n0va.in/projects/pentathon2025/A detailed walkthrough of my journey to 2nd place in the Pentathon 2025 Finals, through exploiting vulnerabilities, escalating privileges, and capturing flags.Fri, 09 May 2025 00:00:00 GMThttps://spidey.n0va.in/projects/androidnativereverse/https://spidey.n0va.in/projects/androidnativereverse/Ever wondered how some Android apps seem to hide all their secrets in native code, far from the friendly land of java or Kotlin? Welcome to the mysterious world of .so files, JNI, and a bit of reverse engineering wizardry.Tue, 29 Apr 2025 00:00:00 GMThttps://spidey.n0va.in/projects/cruxcipher-writeup/https://spidey.n0va.in/projects/cruxcipher-writeup/A detailed writeup on solving the CruXcipher challenge.Tue, 29 Apr 2025 00:00:00 GMThttps://spidey.n0va.in/projects/nullcon-ctf-writeup/https://spidey.n0va.in/projects/nullcon-ctf-writeup/A thrilling tale of me vs. a DNS server, where a little NSEC-walking magic turned a stubborn server into a snitch.Sun, 02 Feb 2025 00:00:00 GMThttps://spidey.n0va.in/projects/localhost-mystery/https://spidey.n0va.in/projects/localhost-mystery/A simple and clear explanation of the differences between 127.0.0.1, 0.0.0.0, and localhost, with practical use cases for Python developers.Tue, 28 Jan 2025 00:00:00 GMThttps://spidey.n0va.in/projects/infosec-ctf/https://spidey.n0va.in/projects/infosec-ctf/A detailed exploration of the challenges and solutions from the InfoSec University Hackathon 2024, highlighting techniques used in mobile security, web exploitation, reverse engineering, and forensics.Tue, 14 Jan 2025 00:00:00 GMThttps://spidey.n0va.in/projects/iris-ctf-writeup/https://spidey.n0va.in/projects/iris-ctf-writeup/A detailed walkthrough of the Political web challenge from IRIS CTF 2025, covering token validation, admin cookie exploitation, and URL encoding techniques.Mon, 06 Jan 2025 00:00:00 GMThttps://spidey.n0va.in/projects/nosql-injection/https://spidey.n0va.in/projects/nosql-injection/Exploring NoSQL injection techniques, including syntax injection and operator abuse. A complete guide for beginners and a refresher.Fri, 20 Dec 2024 00:00:00 GMThttps://spidey.n0va.in/projects/project-1/https://spidey.n0va.in/projects/project-1/Lorem ipsum dolor sit ametFri, 18 Mar 2022 00:00:00 GMThttps://spidey.n0va.in/projects/project-2/https://spidey.n0va.in/projects/project-2/Lorem ipsum dolor sit ametThu, 17 Mar 2022 00:00:00 GMThttps://spidey.n0va.in/projects/project-3/https://spidey.n0va.in/projects/project-3/Lorem ipsum dolor sit ametWed, 16 Mar 2022 00:00:00 GMThttps://spidey.n0va.in/projects/project-4/https://spidey.n0va.in/projects/project-4/Lorem ipsum dolor sit ametTue, 15 Mar 2022 00:00:00 GMT