Security Writeups
CTF writeups, machine walkthroughs, and security challenge solutions.
All Writeups
27 availableWeb2Shell
Enumerated web application
Found file upload vulnerability
ReconCipher
Performed reconnaissance
Identified open services
Polo
Nmap scan revealed services
Enumerated web server
MidnightLeak
Initial enumeration
Discovered data leak
WingData
Scanned target with nmap
Enumerated data application
VariaType
Nmap scan revealed services
Enumerated typing application
Soulmate
Scanned target with nmap
Enumerated web server
NanoCorp
Nmap scan revealed services
Enumerated corporation website
Kobold
Scanned target with nmap
Enumerated web application
Hercules
Scanned target with nmap
Enumerated services
Giveback
Nmap scan revealed services
Enumerated web application
Fries
Scanned target with nmap
Enumerated web application
Facts
Nmap scan revealed services
Enumerated web server
Expressway
Scanned target with nmap
Enumerated services
Eighteen
Nmap scan revealed services
Enumerated web application
CCTV
Scanned target with nmap
Enumerated camera management system
Browsed
Nmap scan revealed services
Enumerated web server
AirTouch
Nmap scan revealed open services
Enumerated web application
VulnNet: Node
Nmap scan revealed Node.js application
Enumerated API endpoints
Reset
Nmap scan revealed services
Enumerated web server
Message to Garcia
Scanned target with nmap
Enumerated services
Lumberjack Turtle
Nmap scan revealed open ports
Enumerated web server
Jack
Scanned target with nmap
Enumerated running services
Hopper Origins
Initial enumeration with nmap
Discovered web application
Eavesdropper
Scanned target with nmap
Enumerated web server and found exposed files
Biblioteca
Performed nmap scan to identify web server
Discovered hidden directory through manual enumeration
Annie
Ran nmap scan to discover open ports (SSH, HTTP)
Enumerated web directory and found WordPress installation