/writeups

~$ grep -i

Solutions and walkthroughs for various Capture The Flag challenges.

ai_disclaimer.txt

[!] AI Policy Notice: While Artificial Intelligence is increasingly integrated into the cybersecurity industry, all CTF writeups and solutions published on this website are solved, documented, and analyzed, as far as possible, in total absence of AI. The ultimate goal here is not to score points, but to truly understand, fail, and learn.

⚡ Quick Payloads: Need commands and one-liners extracted from challenges? Browse /cheatsheets →
Web September 26, 2026

Orion

Platform: HTB

Craft CMS pre-auth RCE leaks a .env with database credentials, and a legacy telnet auth bypass rounds out the chain to root.

Read Solution ->
Web September 6, 2026

Nexus

Platform: HTB

Leaked git credentials open a CRM RCE, and a root-run git sync script leaks root through a tree path-traversal.

Read Solution ->