An OSINT Industries CTF writeup following archived wanted notices, aliases, and vehicle clues to solve Operation LOCKERGOGA.

AutoPilot HTB Writeup : We started with a normal web user and exploited a Redis SSRF to get a shell. After using Postfix for root on Linux, we pivoted to Windows, relayed NTLM to WS02 to steal Thunderbird credentials, and decoded a scheduled task to get Domain Admin and the final flag

A beginner-friendly guide to the TryHackMe 0x41haz challenge: fixing the ELF header and using radare2 to find the password.

A simple Hack The Box Easy Phish writeup explaining how weak SPF and DMARC policies allow convincing domain spoofing.

A beginner-friendly Hacker101 Micro-CMS v1 writeup covering IDOR, stored XSS, and error-based input testing.

A Hack The Box Late writeup covering virtual-host discovery, OCR-assisted Jinja2 SSTI, SSH key access, and privilege escalation through a writable login-alert script.

A simple Hack The Box Canvas writeup covering JavaScript deobfuscation and decoding ASCII character codes.

A simple Hack The Box Backdoor writeup covering WordPress enumeration, path traversal, gdbserver exploitation, and privilege escalation through GNU Screen.