20
Jul
Ganzir — OmniCTF 2026: From HTTP Parser Desync to Jinja2 Arbitrary File Read
4 min read
20
Jul
Stay Wild — OmniCTF 2026: From a Fake Frontend Restriction to GNU tar Wildcard Injection
6 min read
25
Mar
PwnTillDawn ElMariachi-PC (10.150.150.69) Writeup
3 min read
25
Mar
PwnTillDawn — Portal (10.150.150.12) Writeup
2 min read
24
Mar
PwnTillDawn Snare (10.150.150.18) Writeup — LFI to PHP Filter Chain RCE
4 min read
05
Mar
flAWS2.cloud Level 2 Writeup — Open ECR Permissions & Docker Image Secret Leak
4 min read
05
Mar
flAWS2.cloud Level 1 Writeup — Lambda Environment Variable Leak & Unauthorized S3 Access
3 min read
19
Jan
TryHackMe Juicy Writeup — Attacking LLMs with XSS & SSRF
4 min read
13
Nov
TryHackMe CyberHeroes Writeup: Bypassing Client-Side Login
1 min read
13
Nov
TryHackMe ColddBox: Easy Writeup
4 min read
29
Oct
TryHackMe Dear QA Writeup: A Beginner's ret2win Buffer Overflow
6 min read
24
Oct
TryHackMe Bugged Writeup: Exploiting an MQTT IoT Backdoor
4 min read
20
Oct
TryHackMe Ninja Skills Writeup: Finding Files with find, grep, and Permissions
4 min read
17
Oct
TryHackMe GamingServer Writeup: SSH Key Cracking & LXD Privilege Escalation
6 min read
17
Oct
TryHackMe Lian_Yu Writeup: Web Enumeration, Steganography & pkexec Privilege Escalation
5 min read
14
Oct
TryHackMe Basic Malware RE Walkthrough: Static Analysis with Ghidra
5 min read
13
Oct
TryHackMe dogcat Writeup: LFI to Container Escape
9 min read
13
Oct
TryHackMe Chocolate Factory Writeup
4 min read
12
Oct
TryHackMe Battery Writeup: SQL Truncation, XXE, and Python Privesc
6 min read
12
Oct
TryHackMe Startup Writeup
4 min read
12
Oct
TryHackMe Boiler CTF Writeup: sar2html RCE to SUID find Root
5 min read
09
Oct
TryHackMe Cyborg Writeup: Borg Backup, Squid Proxy and Sudo Command Injection
3 min read
08
Oct
TryHackMe Net Sec Challenge Writeup
3 min read
03
Oct
TryHackMe Vulnerability Capstone Writeup: Fuel CMS 1.4.1 RCE (CVE-2018-16763)
3 min read
02
Oct
echoCTF Argum_E_Nvative (ID#10) Reverse Engineering Writeup
4 min read
01
Oct
TryHackMe Agent Sudo Writeup
4 min read
01
Oct
TryHackMe c4ptur3-th3-fl4g Writeup: Encoding & Steganography
4 min read
30
Sep
TryHackMe Bounty Hacker Writeup: FTP Woes, Hydra SSH Brute Force & tar Privesc
2 min read
22
Sep
crackmes.one - babyrev Writeup
2 min read
22
Sep
crackmes.one Very Easy Crackme Writeup: Reversing a Base-64 Hash Check
4 min read
22
Sep
crackmes.one "Sexy 1337" Writeup: Ghidra Decompilation and XOR Reversing
2 min read
19
Sep
TryHackMe Skynet Writeup: SMB, Cuppa CMS RFI & Tar Wildcard Injection
4 min read
18
Sep
TryHackMe W1seGuy Writeup: Cracking Repeating-Key XOR
4 min read
18
Sep
TryHackMe Wgel CTF Writeup: SSH Key Leak to wget Privilege Escalation
2 min read
18
Sep
TryHackMe Brooklyn Nine Nine Writeup: Steganography to Root via nano
2 min read
17
Sep
TryHackMe Overpass Writeup: Auth Bypass to Root via CVE-2021-3156
4 min read
16
Sep
picoCTF "ret" Reverse Engineering Writeup
1 min read
09
Sep
Vulnmachines Special Policy Bucket Writeup: Bypassing an S3 User-Agent Access Policy
4 min read
09
Sep
Vulnmachines - Misconfigured S3 Bucket Writeup
3 min read
08
Sep
Vulnmachines OSINT Series - Complete Writeup (All 6 Flags)
5 min read
04
Sep
echoCTF ezConsty Writeup: PHP Callback Injection via array_walk
2 min read
04
Sep
echoCTF juggling-flea Writeup: PHP Type Juggling Authentication Bypass
2 min read
04
Sep
echoCTF 6letter-juggler Writeup: PHP Type Juggling Auth Bypass
1 min read
02
Sep
CyberTalents - Easy Message Web Challenge Writeup
2 min read
02
Sep
CyberTalents "Who Am I?" Web Challenge Writeup
1 min read
01
Sep
The Best CTF Practice Platforms: A Curated Roundup (2025)
4 min read
29
Aug
picoCTF IntroToBurp Writeup: Bypassing OTP with Burp Suite
1 min read