2025

Securinets CTF 2025 Writeup: SQL Injection, SSRF and IDOR Chain

9 mins

CTF SQL Injection SSRF IDOR Web

CrewCTF 2025 Writeup: Bypassing a Strict CSP in Love Notes

3 mins

CTF Web XSS CSP

FortID CTF 2025 Writeup: Document Upload IDOR via target_user

2 mins

CTF Web IDOR File Upload Reverse Engineering

Nullcon CTF 2025 Writeup: Password Oracle Brute Force and Source Disclosure

6 mins

CTF Web PHP Brute Force Information Disclosure

TFCCTF 2025 Writeup: ZIP Symlink File Read and DOM Clobbering

6 mins

CTF Web File Upload DOM Clobbering XSS

HTB Cyber Apocalypse 2025 Writeup: Web, Reversing and OSINT

4 mins

CTF Web Reverse Engineering OSINT GDB HackTheBox

ACECTF 2025 Writeup: JWT, S3 Buckets, WebCrypto and XOR Keystream Reuse

11 mins

CTF Web JWT S3 Crypto OSINT Reverse Engineering

2024

1337UP CTF 2024 Writeup: Cold Storage Crypto and OSINT

4 mins

CTF Crypto RSA XOR OSINT

Glacier CTF 2024 Writeup: Extracting a Hidden PNG from a PDF Stream

2 mins

CTF Forensics PDF Peepdf