All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.


Filter by tag:

DarkNet Services Stage 3 Penetration Test

Six-machine multi-subnet compromise chaining SSRF, XML injection, ECDSA nonce reuse, LFI, TOCTOU race condition, MCP prompt injection, Docker container forensics, network pivoting, and a fresh kernel exploit to root every host and capture all five flags.

WHAMazon! Web 4 - The Archives

Chaining prior recon from robots.txt with API endpoint fuzzing and a missing-result anomaly to discover a path traversal vulnerability in an image file server.