Midnight Flag Finals 2026 - Midnight Archive
2026-06-15
Dirty arbitrary file write to code execution via .pth and Werkzeug watchdog
Write-ups
UofTCTF 2026 - Pasteboard
2026-01-12
XSS to RCE via chromedriver
HeroCTF V7 - Middle Earth
2025-12-02
MitM into XSS
N1CTF 2025 - EEZZJS
2025-11-01
Bypassing path.extname to get RCE
STHACK 2025 - DropValt Railway - Sabotage 1/2
2025-05-26
Web - Medium - FirstBlood
STHACK 2025 - Aures
2025-05-26
Web - Medium
WolvCTF 2025
2025-03-24
Some cool sqlis
HTB University 2024 - Web - Breaking Bank
2024-12-16
Bypass authentication via jwt jku, then empty crypto wallet
HTB University 2024 - Web - Armaxis
2024-12-15
Obtain access to the admin account, achieve code execution by dispatching weapons and retrieve the flag
STHACK 2024
2024-05-26
Critical bug for Hack4Values and messing with jwts
Casino de Sthackadopole
2024-04-21
Hacking pokemon with blind sql injection