Web | CTF Writeups

Address Book

NorthSec 2026 / Address Book

May 18, 2026

NorthSec xpath xml path-traversal

Drone License

NorthSec 2026 / Drone License

May 18, 2026

NorthSec github-actions sqli llm prompt-injection

Hello Sunshine

NorthSec 2026 / Hello Sunshine

May 18, 2026

NorthSec mcp pyodide sandbox-escape

Pesticide

NorthSec 2026 / Pesticide

May 18, 2026

NorthSec wasm jwt auth

Save The Trees

NorthSec 2026 / Save The Trees

May 18, 2026

NorthSec source-disclosure authorization php

Escartem Gallery

Cyber Saguenay CTF 2026 / Escartem Gallery

Apr 08, 2026

Cyber Saguenay CTF javascript encoding nextjs reverse-engineering

ChefVault: La recette secrete 1

Cyber Saguenay CTF 2026 / ChefVault la recette secrete 1

Apr 08, 2026

Cyber Saguenay CTF php auth oracle credential-disclosure

Love at First Breach 2026 - Advanced Track: Task 5

Love at First Breach / Love at First Breach 2026 - Advanced Track: Task 5

Feb 15, 2026

Hard

TryHackMe ssti jwt ssrf python-builtins

Hidden Deep Into My Heart

Love at First Breach / Hidden Deep Into My Heart

Feb 13, 2026

Easy

TryHackMe robots-txt-disclosure credential-disclosure forced-browsing

Valenfind

Love at First Breach / Valenfind

Feb 13, 2026

Medium

TryHackMe lfi

Dogcat

Feb 07, 2026

Medium

TryHackMe lfi rce docker privilege-escalation

Ultratech

Feb 07, 2026

Medium

TryHackMe rce nodejs docker hashes privilege-escalation