CTF Writeups

APT438

Mon, 18 May 2026 00:00:00 GMT

APT438 was an endpoint forensics challenge built around a Windows triage dataset. The task was to answer 21 platform questions about initial compromise, malware activity, exfiltrat

The Germinator

Mon, 18 May 2026 00:00:00 GMT

The Germinator was a reverse-engineering challenge built around a stripped x86-64 Rust ELF named germinator. Running it locally produced a license failure, but the post-flag hint e

Address Book

Mon, 18 May 2026 00:00:00 GMT

Address Book was a web challenge built around unsafe XML querying. The application let users search employee data, but three design bugs combined into full data extraction:

Drone License

Mon, 18 May 2026 00:00:00 GMT

Drone License was a GitHub workflow and LLM-agent challenge with two flags. The first flag came from SQL injection through a support issue workflow. The second came from prompt-inj

Hello Sunshine

Mon, 18 May 2026 00:00:00 GMT

Hello Sunshine was an MCP-over-HTTP challenge at open-sunshine.mcp.ctf. The public service exposed a runpython tool backed by Pyodide, but the sandbox had a JavaScript bridge into

Pesticide

Mon, 18 May 2026 00:00:00 GMT

Pesticide was a web challenge against Monsatan's supplier portal at supply.monsatan.ctf. The application exposed a low-privilege login, a Rust/WASM frontend, and an admin-only API

Save The Trees

Mon, 18 May 2026 00:00:00 GMT

Save The Trees was a multi-stage web challenge involving an announcement board and a separate print-spooler service. I recovered the first three flags through the board-side applic

Sprinklers

Mon, 18 May 2026 00:00:00 GMT

Sprinklers was a SCADA-style challenge around a controller binary for Monsatan's sprinkler robots. The challenge had two solved objectives:

Escartem Gallery

Wed, 08 Apr 2026 00:00:00 GMT

The gallery challenge was a web encoding/reversal task. The flag was not hidden in image steganography; it was in an external data payload decoded by client-side JavaScript.

System

Wed, 08 Apr 2026 00:00:00 GMT

This SSH challenge initially looked like a restricted-shell escape and local privilege-escalation task. The solved path followed the temporary-storage hint and found a readable mar

Qui a implemente ca?

Wed, 08 Apr 2026 00:00:00 GMT

This reverse-engineering challenge used a Windows PE GUI binary with local license validation and a remote API. Reversing the validator produced a valid 25-character key, and repla

ChefVault: La recette secrete 1

Wed, 08 Apr 2026 00:00:00 GMT

ChefVault was a PHP web authentication challenge. The solve used the registration endpoint as a password-oracle to discover valid credentials, then logged in and read the authentic

Pas un PDF

Wed, 08 Apr 2026 00:00:00 GMT

The provided archive contained a fake executable that was actually an obfuscated PDF. The payload used a repeating 7-byte XOR key, and the final flag was recovered from rendered PD

Vault42

Wed, 08 Apr 2026 00:00:00 GMT

Vault42 was an Android APK reverse-engineering challenge. Static APK analysis exposed hardcoded secrets, exported activity behavior, and native-check literals, resulting in four re

Love at First Breach 2026 - Advanced Track: Task 5

Sun, 15 Feb 2026 00:00:00 GMT

This writeup covers Task 5 of the Love at First Breach 2026 Advanced Track. Sensitive secrets and flags are redacted.

Hidden Deep Into My Heart

Fri, 13 Feb 2026 00:00:00 GMT

This challenge is part of the Love at First Breach (2026) event on TryHackMe.

Valenfind

Fri, 13 Feb 2026 00:00:00 GMT

This challenge is part of the Love at First Breach (2026) event on TryHackMe.

Dogcat

Sat, 07 Feb 2026 00:00:00 GMT

nmap -sV -Pn -oN nmap.txt

Ultratech

Sat, 07 Feb 2026 00:00:00 GMT

nmap -sV -Pn -oN nmap.txt -p21,22,8081,31331 -sC

Wonderland

Sat, 07 Feb 2026 00:00:00 GMT

1. Web enum discovers /r/a/b/b/i/t/ and reveals credentials for alice.