Security Writeups
CTF writeups, machine walkthroughs, and security challenge solutions. Active machines show approach only — full writeups available after retirement.
Active Machines
approach onlySmartHire
Enumerated hiring platform
Found authentication flaw
MakeSense
Enumerated target system
Found sense-making vulnerability
DevHub
Enumerated development hub
Found exposed development endpoints
Connected
Enumerated connected services
Found service vulnerability
Cohort
AD enumeration with BloodHound
Identified cohort group misconfiguration
BedSide
Enumerated target with nmap
Discovered web application vulnerability
Retired Writeups
17 availableSilentium
VHost fuzzing
CVE-2025-58434 for account takeover
Sorcery
Nmap scan revealed services
Enumerated web application
Snapped
Initial enumeration
Discovered snapshot application
Signed
Scanned target with nmap
Enumerated services
Pterodactyl
Nmap scan revealed services
Enumerated game server panel
Principal
AD enumeration
Identified vulnerable service
Overwatch
Comprehensive enumeration
Identified monitoring system vulnerability
Logging
Initial enumeration
Discovered logging application
Interpreter
Nmap scan revealed services
Enumerated interpreter application
Intelligence
AD enumeration
Identified GPO vulnerability
Guardian
Initial enumeration
Discovered security application
FireFlow
Comprehensive enumeration
Identified workflow engine vulnerability
Eloquia
Initial enumeration
Discovered web application
DevArea
Scanned target with nmap
Enumerated development environment
Conversor
Nmap scan revealed services
Enumerated conversion service
Cobblestone
Initial enumeration
Discovered web application
Breach
Comprehensive enumeration
Identified vulnerable web application