A simple TryHackMe Room 404 writeup covering web directory enumeration and source-code recovery from an exposed Git repository.

A simple Hack The Box BoardLight writeup covering virtual-host discovery, Dolibarr exploitation, credential recovery, and Enlightenment privilege escalation.

A TryHackMe OSINT writeup for Cache Me Outside, following clues across Komoot, GitHub, email metadata, social profiles, and map evidence to identify the final location.

A TryHackMe writeup for Silent Monitor covering service enumeration, SQL injection login bypass, command injection, credential discovery, SSH access, and Linux privilege escalation with Copy Fail.

A binary exploitation writeup for FlagVault, showing how an unsafe printf call leaks the flag from stack memory through a format string vulnerability.

Pentest the Support Operations Platform and escalate access to achieve RCE on the server.

An OSINT challenge writeup that traces a real Interpol Red Notice subject through public company records to identify a last known 2015 address.

A quick picoCTF web challenge where the flag is hidden inside a JavaScript bookmarklet and can be recovered by understanding the client-side decryption logic.