// POSTS
Posts
Technical writing with the content kept readable and the metadata useful.
4 postsShowing: NewestFilter and sort update instantly
WriteupPwn·EN·2026-09-13
K17 CTF 2026 Writeups: ihyh, not json, and huge binary 2
Three K17 pwn writeups covering FILE-structure abuse, a recursive parser stack pivot, and constrained format-string ROP.
WriteupWeb·EN·2026-08-31
COMPFEST CTF 2026 Writeup: Egg
A WordPress 7.0 pre-auth RCE chain, from a WAF bypass and SQL injection to a temporary admin and command execution.
WriteupWeb·EN·2026-08-23
BrunnerCTF 2026 Writeup: Technical Debt
Chaining SAML signature wrapping, ASP.NET MVC mass assignment, and Mono BinaryFormatter deserialization into RCE.
WriteupWeb·EN·2026-08-09
LIT CTF 2026 Writeup: no way out
A client-side Google Forms routing bypass for LIT CTF 2026's no way out.
No posts match this filter.
Posts
4
Categories
2
Tags
8
Total Words
30,345
Running Days
80 days
Last Activity
0 days ago