CTF write-ups

Hack The Box, Proving Grounds, TryHackMe, and other CTF-style walkthroughs.

• 

  HTB • CTF • EscapeTwo • Write-Up

  Updated:May 21, 2025 |  at 10:46 AM

  Hack The Box EscapeTwo: MSSQL `xp_cmdshell` foothold, plaintext creds in config files, ESC4 certificate abuse, and a WriteOwner ACL chain to Domain Admin.

• 

  HTB • CTF • Cicada • Write-Up

  Published:Dec 26, 2024 |  at 01:14 PM

  Hack The Box CTF - Cicada. SMB shares, password spraying, RID brute-forcing, PrivEsc via Token Abuse

• 

  HTB • CTF • Chemistry • Write-Up

  Updated:May 21, 2025 |  at 10:46 AM

  Hack The Box CTF - Chemistry. Pymatgen CIF parser RCE, Credentials from SQLite database, Python aiohttp app vulnerable to path traversal (CVE-2024-23334).

• 

  Mr. Windoclin - ICSD2024

  Published:Sep 24, 2024 |  at 09:00 AM

  Mr. Windoclin — Challenge №12 from the ICSD 2024 'Who am I' CTF. Walkthrough of the Windows-themed challenge I authored, with the intended solution path.