These are writeups of Hack The Box machines and CTF challenges I’ve worked through. I try to write the conclusions - the technique and why it worked - rather than a command-by-command walkthrough.
-
BSidesTLV 2025: Avengers Query Language CTF Writeup
- December 19, 2025
When S.H.I.E.L.D. leaks classified intel through GraphQL Introspection. -
BSidesTLV 2025: Avengers Mail CTF Writeup
- December 19, 2025
The challenge that left the Avengers (and the players) hanging: Mail Confusion. -
KITCTF - Cloudwhere
- March 2, 2023
Whitebox web ctf -
Cascade machine writeup
- January 15, 2022
From domain reconnaissance to reverse engineering. Come and have fun. -
Active machine writeup
- December 7, 2021
Very cool machine that involve kerberos and Impacket's scripts usage.
Everything else lives on the blog index or under categories.