all posts

2026-06-10Fragment - HC Writeup

10 min read·ctfweboauthsstiprivilege-escalation

2026-05-25Mirror - HC Writeup

8 min read·ctfwebssrfwordpresspath-traversalprivilege-escalation

2026-05-23Guest - HC Writeup

6 min read·ctfactive-directoryasrep-roastingacl-abusewinrm

2026-05-08Pharmacy - HC Writeup

5 min read·ctfwebnodefile-uploadotpgitpythonprivilege-escalation

2026-05-01Emergency - HC Writeup

6 min read·ctfwebphplfiotpprivilege-escalation

2026-04-12Discovery - HC Writeup

7 min read·ctfwebnosql-injectionspring-elrceprivilege-escalation

2026-04-10Foundation - HC Writeup

6 min read·ctfwebssrfaspnetactive-directoryprivilege-escalation

2026-04-03Captain - HC Writeup

5 min read·webkubernetesprivilege-escalation

2026-03-30Neural - HC Writeup

7 min read·ctfwebmcprcepostgresqlprivilege-escalation

2026-03-21Anomaly - HC Writeup

6 min read·websupabasepostgrestjwtcapabilitiesctf

2026-03-17Pipe - HC Writeup

6 min read·ctfwebrcedockerspiprsyncpamprivilege-escalation

2026-03-14University - HC Writeup

9 min read·ctfwebxssunicodepath-traversalprivilege-escalation

2026-03-02Telecom - HC Writeup

8 min read·ctfinformation-disclosurearbitrary-file-writercecommand-injection

2026-02-27Spark - HC Writeup

8 min read·ctfssrfgopherapache-sparkrceprivilege-escalation

2026-02-15Disable - HC Writeup

9 min read·ctfinsecure-deserializationaspnet-corewindowsprivilege-escalation

2026-02-15Identity API - HC Writeup

8 min read·ctfwebgojwtmass-assignment

2026-02-15Instance Metrics - HC Writeup

5 min read·ctfwebcode-reviewrcegonodejs

2026-02-08Neon Forge - HC Writeup

8 min read·ctfwebssti

2026-01-19Dodo - HC Writeup

10 min read·ctfodoopostgresqllateral-movementprivilege-escalation

2026-01-19Git Hooks: The Hidden RCE Vector in Your Development Workflow

18 min read·rcegitred-team

2026-01-19Tech Academy - HC Writeup

11 min read·ctfweblfipharpythonprivilege-escalation

2026-01-10Logs - HC Writeup

10 min read·ctfwebjwtlfilog-poisoningprivilege-escalation