Security Writeups
CTF writeups, machine walkthroughs, and security challenge solutions.
All Writeups
42 availableSilentium
VHost fuzzing
CVE-2025-58434 for account takeover
WebAdmin
Enumerated admin panel
Found authentication weakness
Trivarna
Scanned target with nmap
Enumerated web application
StegoVault
Enumerated steganography challenge
Extracted hidden data
PageVault
Scanned target with nmap
Enumerated page vault application
Mr.Robot
Enumerated target system
Found vulnerable service
Deathnote
Scanned target with nmap
Enumerated web application
Chain
Identified chain of vulnerabilities
Exploited initial foothold
Behind The Proxy
Enumerated proxy configuration
Found proxy bypass vulnerability
Sorcery
Nmap scan revealed services
Enumerated web application
Snapped
Initial enumeration
Discovered snapshot application
Signed
Scanned target with nmap
Enumerated services
Pterodactyl
Nmap scan revealed services
Enumerated game server panel
Principal
AD enumeration
Identified vulnerable service
Overwatch
Comprehensive enumeration
Identified monitoring system vulnerability
Logging
Initial enumeration
Discovered logging application
Interpreter
Nmap scan revealed services
Enumerated interpreter application
Intelligence
AD enumeration
Identified GPO vulnerability
Guardian
Initial enumeration
Discovered security application
FireFlow
Comprehensive enumeration
Identified workflow engine vulnerability
Eloquia
Initial enumeration
Discovered web application
DevArea
Scanned target with nmap
Enumerated development environment
Conversor
Nmap scan revealed services
Enumerated conversion service
Cobblestone
Initial enumeration
Discovered web application
Breach
Comprehensive enumeration
Identified vulnerable web application
VulnNet: dotpy
Scanned target with nmap
Enumerated Python web application
VulnNet: Roasted
AD enumeration
Identified ASREPRoastable accounts
VulnNet: Internal
Network enumeration
Identified internal services
VulnNet: Active
AD enumeration with BloodHound
Identified Kerberoastable accounts
Sustah
Initial enumeration
Discovered web application
RazorBlack
Scanned target with nmap
Enumerated web application
One Piece
Nmap scan revealed services
Enumerated web application
Ledger
Initial nmap scan
Enumerated web application
IronShade
Nmap scan revealed services
Enumerated web server
Inferno
Scanned target with nmap
Enumerated web application
Exfilibur
Nmap scan revealed web services
Enumerated application for data exfiltration vectors
Devie
Initial enumeration with nmap
Discovered web application with development endpoints
Debug
Nmap scan revealed multiple services
Enumerated web application for debugging endpoints
CupidCards
Scanned target with nmap
Enumerated web application endpoints
Chains of Love
Enumerated web application for SSRF vulnerabilities
Discovered internal services through SSRF
Brute
Scanned target with nmap
Enumerated web application for input vectors
Attacktive Directory
Enumerated AD environment using BloodHound
Identified Kerberoastable service accounts