CTF.SG CTF 2022 Write-up

Hi everyone! Today’s write-up is on CTF.SG 2022. It is a 24 hours CTF hosted over the weekend (12-13/3/2022) with many different categories such as Sanity, Web, Pwn, Cryptography, Reverse Engineering, and Misc. I did not have time to solve many challenges as I needed my sleep. This CTF definitely isn’t easy, especially for reverse […]

SANS Holiday Hack Challenge 2021

Hi everyone! This is a write-up on the recent SANS Holiday Hack Challenge CTF. I hope they will be helpful to you. It is my first time trying out SANS Holiday Hack challenge as they host it yearly. If you haven’t tried it out, the main goal of this CTF is to learn. Hence there […]

HackTheBox – Phonebook Write-up

Dear readers, Today’s post is Phonebook, a web challenge on HackTheBox. It was created on 31st October 2020. This challenge is on LDAP injection and brute-forcing LDAP login so read on if you are interested! Let’s get started! Files provided There are no files provided for this challenge. Outlook of the website URL of the […]

HackTheBox – LoveTok Write-up

Dear readers, Today’s post is on LoveTok, a web challenge in HackTheBox. The challenge was created on 13th February 2021. It is a sanitation addslashes() bypass challenge so read on if you are interested! Files provided There are a number of files provided as well as the dockerfile to set up the server. You may […]

HackTheBox – Templated Write-up

Dear readers, Recently I finished another web challenge called Templated on HackTheBox. It was a really short and fun Server Side Template Injection (SSTI) challenge created on 24th October 2020. Let’s go straight into the write-up. Files provided There are no files provided which is pretty rare for an challenges in HackTheBox. Outlook of the […]

HackTheBox – Petpet Rcbee Write-up

Dear readers, Today’s post is on a web challenge on HackTheBox called Petpet Rcbee. It was created on 5th June 2021. It is a pretty short challenge so this post shouldn’t be too long. Let’s dive right into it. Files provided There are a number of files provided by the challenge which contais files needed […]

HackTheBox – Emdee five for life Write-up

Dear readers, Today’s post is on the “Emdee five for life” challenge which is a web challenge. The challenge was created on 22nd May 2019. It is a very basic challenge so the write-up will be quite short. Let’s dive right into the write-up. Files provide There are no files provided hence we have to […]

HackTheBox – Toxic Write-up

Dear readers, This post is on a web-based challenge on HackTheBox created on 1st May 2021 (see Fig 1) that tests on Log Poisoning attack via the UserAgent. Let’s dive straight into it. View of the website When you first access the website, it looks just like what you see in Fig 2. However, there […]