All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.

2026-03-01 Web Insane

DEADROP Web 6 - weather.control.deadrop

A three-stage vulnerability chain - SQL injection to bypass authentication, IDOR to steal an admin API key from another operator's report, then command injection via the weather query endpoint to achieve RCE and read the flag.

sqli auth-bypass idor command-injection

2026-03-01 Web Easy

DEADROP Web 1 - surveillance.archive.gov

Exploiting a UNION-based SQL injection in a fake government FOIA portal to extract a flag from a hidden table that the query was never meant to reach.

sqli union-injection sqlite information-schema

2026-02-28 Pentest Hard

DarkNet Services Stage 2 Penetration Test

Four-machine /24 network compromise, chaining SQLi, SSTI, SMB enumeration, SNMP credential extraction, LD_PRELOAD privesc, and PHP deserialization RCE to root all hosts, then hijacking a live Cloudflare-tunneled domain by replacing its Flask backend with a socat proxy to the defaced web server.

sqli ssti jinja2 rce