Personal Collection of CTF Writeups and Security Research 🚩
A personal collection of cybersecurity writeups — from CTF challenges and HTB/THM walkthroughs to notes on real-world vulnerabilities reported through VDPs (and similar).
- HackTheBox CTF — Crypto: Iced TEA
- HackTheBox CTF — Crypto: Makeshift
- Cyber Apocalypse 2024: Hacker Royale — Crypto: Dynastic
- CTF Writeup — Cyber Apocalypse 2024: Hacker Royale — Reversing: LootStash
- HackTheBox — Introduction to Windows Command Line — Finding Files and Directories
- CTF Writeup — Hackme CTF
- CTF Writeup — pingCTF 2021 — Steganography
- CTF Writeup — Fetch the Flag CTF 2023 — Unhackable Andy
- CTF Writeup — Fetch the Flag CTF 2023 — Nine-One-Sixteen
- AmateursCTF 2024 — web/denied Challenge — Writeup
- CTF Writeup — RITCTF 2024 — Beep Boop
- CTF Writeup — 24@CTF — SteganOsint 1
- CTF Writeup — SwampCTF 2024 — Lost in Space
- CTF Writeup — Wayne State University — CTF24 — XZ Utils Investigation 1
- CTF Writeup — HackPack CTF 2024 — LLM edition — YellowDog-1
- CTF Writeup — AirOverflow CTF — 2024 — Insanity
- CTF Writeup — SpringForwardCTF — Minerva’s Quest
- openECSC 2024 — Round 2 — CTF Writeup — Blind maze
- CTF Writeup — UIUCTF 2024 — An Unlikely Partnership
- CTF Writeup — DownUnderCTF 2024 — tldr please summarise
- CTF Writeup — DownUnderCTF 2024 — offtheramp
- CTF Writeup — DownUnderCTF 2024 — Baby’s First Forensics
- CTF Writeup — corCTF 2024 — the-conspiracy
- CTF Writeup — corCTF 2024 — infiltration
- CTF Writeup — n00bzCTF 2024 — The Gang 2
- CTF Writeup — TFC CTF 2024 — CCCCC
- CTF Writeup — IRON CTF 2024 — Math Gone Wrong
- CTF Writeup — IRON CTF 2024 — Introspection
- CTF Writeup — Crate-CTF 2024 — XML-kontroll
- CTF Writeup — TJCTF 2025 — mouse-trail
- CTF Writeup — TJCTF 2025 — guess-my-number
- CTF Writeup — TJCTF 2025 — hidden-message
- CTF Writeup — TJCTF 2025 — loopy
- TryHackMe — Advent of Cyber 2023 — Hydra — Day 3 Walkthrough
- Advent of Cyber 2023 — TryHackMe — Day 5 — Solutions
- Advent of Cyber 2023 — TryHackMe — CeWL & wfuzz — Day 4 Walkthrough
- TryHackMe — Source Code Security — Writeup
- TryHackMe — Security Principles — Writeup
- TryHackMe — Lessons Learned — Writeup
- TryHackMe — MalDoc: Static Analysis — Writeup
- TryHackMe — Anti-Reverse Engineering — Writeup
- TryHackMe — x86 Assembly Crash Course — Writeup
- TryHackMe — Windows Internals — Writeup
- TryHackMe — Windows User Account Forensics — Writeup
- TryHackMe — Advanced Static Analysis — Writeup
- TryHackMe — CORS & SOP — Writeup
- TryHackMe — Race Conditions — Writeup
- TryHackMe — IR Difficulties and Challenges — Writeup
- TryHackMe — Analysing Volatile Memory — Writeup
- TryHackMe — Insecure Deserialisation — Writeup
- TryHackMe — Windows Network Analysis — Writeup
- TryHackMe — IR Philosophy and Ethics — Writeup
- TryHackMe — LDAP Injection — Writeup
- TryHackMe — XXE Injection — Writeup
- TryHackMe — TShark: The Basics — Writeup
- TryHackMe — Advanced SQL Injection — Writeup
- TryHackMe — TShark: CLI Wireshark Features — Writeup
- TryHackMe — DOM-Based Attacks — Writeup
- TryHackMe — Server-side Template Injection — Writeup
- TryHackMe — iOS Analysis — Writeup
- TryHackMe — Snyk Open Source — Writeup
- TryHackMe — Snyk Code — Writeup
- TryHackMe — Cluster Hardening — Writeup
- TryHackMe — ORM Injection — Writeup
- TryHackMe — NoSQL Injection — Writeup
- TryHackMe — Linux Live Analysis — Writeup
- TryHackMe — K8s Best Security Practices — Writeup
- TryHackMe — Critical — Writeup
- TryHackMe — Introduction to CryptOps — Writeup
- TryHackMe — Enumeration & Brute Force — Writeup
- TryHackMe — Forensic Imaging — Writeup
- TryHackMe — Session Management — Writeup
- TryHackMe — Joomify — Writeup
- TryHackMe — Microservices Architectures — Writeup
- TryHackMe — Intro to Cold System Forensics — Writeup
- TryHackMe — Hypervisor Internals — Writeup
- TryHackMe — Multi-Factor Authentication — Writeup
- TryHackMe — Nmap: The Basics — Writeup
- TryHackMe — Tcpdump: The Basics — Writeup
- TryHackMe — Networking Essentials — Writeup
- TryHackMe — Networking Core Protocols — Writeup
- TryHackMe — Networking Secure Protocols — Writeup
- TryHackMe — Incident Response Fundamentals — Writeup
- TryHackMe — Digital Forensics Fundamentals — Writeup
- TryHackMe — Firewall Fundamentals — Writeup
- TryHackMe — IDS Fundamentals — Writeup
- TryHackMe — Vulnerability Scanner Overview — Writeup
- TryHackMe — Public Key Cryptography Basics — Writeup
- TryHackMe — Hashing Basics — Writeup
- TryHackMe — CAPA: The Basics — Writeup
- TryHackMe — SQLMap: The Basics — Writeup
- TryHackMe — Gobuster: The Basics — Writeup
- TryHackMe — Logs Fundamentals — Writeup
- TryHackMe — Linux Shells — Writeup
- TryHackMe — Shells Overview — Writeup
- TryHackMe — Cryptography Basics — Writeup
- TryHackMe — SOC Fundamentals — Writeup
- Writeup Bugcrowd — Private program — QR codes
- Vuln — Substack Writeup — Open URL Redirection
- Social media account hijacking — VDP
- How I Found 3x XSS in 6 Seconds! Without Automated Tools
- How Many Ethical Hackers Are Out There? A Global Look Through Google Bug Hunters Data
- Mapping the World’s Ethical Hackers: Insights from HackerOne Platform
- An Attempt to Hijack My Digital Identity: A Cyber Attack Following Two Medium.com Articles
- Bogon Address — Explained
- Why Is My Network 192.168.x.x… but My Virtual Machine Shows 10.x.x.x?
- One IP, Many People: Why You Can’t Tell Who’s Really Visiting Your Website
- Why You Have to Wait for Your CVE: Behind the Scenes of MITRE’s Process
- Reflected XSS with Base64 — Breaching Obscurity in Seconds
I hope you enjoy! 🎉