All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.

2026-09-12 Reverse Engineering Hard

Dragon Hunt - Records 07 & 08: Synister & Hallow

Dragon Hunt Records 07 and 08. Reversing a Go client to recover the SYNR/3 wire format and shared secret, then chaining three state-machine bugs into the sanctum; and forging a Hallow token to land a stored XSS that captures the Professor's password.

Dragon-Hunt rev go ghidra

2026-02-28 JWT Medium

WHAMazon! JWT 3 - RSA Revenge

Using provided RSA private key components to manually implement PKCS#1 v1.5 signing and forge a valid RS256 JWT admin token.

jwt rs256 rsa pkcs1-v15

2026-02-28 JWT Easy

WHAMazon! JWT 2 - Forge

Exploiting the JWT 'none' algorithm vulnerability to forge an unsigned admin token without knowing the signing secret.

jwt none-algorithm algorithm-confusion token-forgery

2026-02-28 JWT Easy

WHAMazon! JWT 1 - WHAM Token

Extracting a JWT signing key from a netcat service, forging an admin token with jwt.io, and submitting it to gain elevated access and retrieve the flag.

jwt hs256 token-forgery privilege-escalation