A picoCTF web challenge focused on weak client-side authentication, where the valid credentials are exposed in a JavaScript file.

A picoCTF web challenge where exposed session data allows us to replace our cookie with an admin session and access the flag.

A picoCTF web challenge that demonstrates server-side template injection in a Flask application and leads to file disclosure through template execution.

A beginner-friendly picoCTF web challenge where the flag is hidden in page source as Base64-encoded data.

A simple TryHackMe writeup for Operation Takeover covering Nmap, UDP discovery, SNMP enumeration, and reading the root flag through the NET-SNMP-EXTEND feature.

A simple Hack The Box writeup for Cap covering Nmap enumeration, an IDOR issue in PCAP snapshots, credential recovery from FTP traffic, SSH access, and privilege escalation through Linux capabilities.

A simple Hack The Box writeup for Principal covering enumeration, JWT/JWE abuse to become admin, SSH access as svc-deploy, and privilege escalation with an SSH CA key.

A simple OSINT writeup: use metadata checks + reverse image search to recover the passenger name, seat, and arrival airport IATA code from a pixelated boarding pass.