Welcome to the Lab
CTF writeups, malware analysis, and digital forensics adventures. Breaking things down, byte by byte.
Recent Writeups
Dragon Hunt - Records 07 & 08: Synister & Hallow
Dragon Hunt Records 07 and 08. Reversing a Go client to recover the SYNR/3 wire format and shared secret, then chaining three state-machine bugs into the sanctum; and forging a Hallow token to land a stored XSS that captures the Professor's password.
Raptor Weekly 13 - Night Traffic
Night Traffic: layer-2 MITM in a noisy office capture; flag is XOR-encrypted under a SHA-256 of the attackers identity chain. Flag recovered.
DarkNet Services Stage 3 Penetration Test
Six-machine multi-subnet compromise chaining SSRF, XML injection, ECDSA nonce reuse, LFI, TOCTOU race condition, MCP prompt injection, Docker container forensics, network pivoting, and a fresh kernel exploit to root every host and capture all five flags.
Raptor Weekly 6 - 3lectric Igloo - Web
Three flags across a penguin colony web app. Source recon, IDOR enumeration, OS command injection through a diagnostic ping utility, and AES-CBC decryption using keys leaked from the process environment.
Raptor Weekly 2 - ECHELON Web 1 - 1.1 ; OPEN CHANNEL
Chaining HTML comment enumeration to a disallowed robots.txt entry, pivoting through an exposed staging endpoint to recover an operator username, and extracting the portal password from a JSON debug response behind a custom request header.