Writeups, attack technique notes, and defensive notes from CTF challenges.
writeups/<platform>/<event>/<challenge>/: writeup (README.md) and solve artifacts (artifacts/).writeups/pwnbox/: pwnbox.io challenges.templates/writeup.md: template for new writeups.
Each writeup has a difficulty from 1 to 5, shown as chili peppers (🌶️) in the table and in the writeup header. The rating is our own subjective judgment of how hard the challenge was for us, not the platform's rating.
| Level | Icon | Meaning |
|---|---|---|
| 1 | 🌶️ | Easy |
| 2 | 🌶️🌶️ | Moderate |
| 3 | 🌶️🌶️🌶️ | Medium |
| 4 | 🌶️🌶️🌶️🌶️ | Hard |
| 5 | 🌶️🌶️🌶️🌶️🌶️ | Very hard |
| Icon | Meaning |
|---|---|
| 🏁 | Solved (flag captured) |
| 🤖 | Ships an automatic solve script (solve.py) |
| 💪 | Manual: steps guideline only |
| Platform | Event | Challenge | Category | Difficulty | Status | Auto solve |
|---|---|---|---|---|---|---|
| HTB | secfest26 | frontdesk | web | 🌶️ (1/5) | 🏁 | 🤖 |
| HTB | secfest26 | open-invitation | web | 🌶️ (1/5) | 🏁 | 🤖 |
| HTB | secfest26 | checkout | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | dns-dossier | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | sr-network | web | 🌶️🌶️🌶️ (3/5) | 🏁 | 💪 |
| HTB | secfest26 | ghost-fleet | web | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | secfest26 | nebula-network | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | quantum-market | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | leaked | forensics | 🌶️🌶️🌶️ (3/5) | 🏁 | 💪 |
| HTB | secfest26 | stolen-variables | forensics | 🌶️🌶️ (2/5) | 🏁 | 💪 |
| HTB | secfest26 | based0x | crypto | 🌶️ (1/5) | 🏁 | 🤖 |
| HTB | secfest26 | me-is-mey | crypto | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | the-gazorpazorps | crypto | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | secfest26 | re-cars-ai | ai-ml | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | cosmic-crisis | ai-ml | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | stock-signals | ai-ml | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | secfest26 | logics-business | secure-coding | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| Platform | Event | Challenge | Category | Difficulty | Status | Auto solve |
|---|---|---|---|---|---|---|
| HTB | try-out | prison-pipeline | misc | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |
| HTB | try-out | locked-away | misc | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | dynastic | crypto | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | blessed | crypto | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |
| HTB | try-out | notademocraticelection | blockchain | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | dynamic-paths | code | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | character | misc | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | chrono-mind | misc | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |
| HTB | try-out | hidden-path | misc | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | stop-drop-roll | misc | 🌶️ (1/5) | 🏁 | 🤖 |
| HTB | try-out | regularity | pwn | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | abyss | pwn | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | getting-started | pwn | 🌶️ (1/5) | 🏁 | 🤖 |
| HTB | try-out | labyrinth | pwn | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | void | pwn | 🌶️🌶️🌶️🌶️🌶️ (5/5) | 🏁 | 🤖 |
| HTB | try-out | router-web | pwn | 🌶️🌶️🌶️🌶️🌶️ (5/5) | 🏁 | 🤖 |
| HTB | try-out | jailbreak | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | timekorp | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | flag-command | web | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | guild | web | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | labyrinth-linguist | web | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | htb-proxy | web | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |
| HTB | try-out | blueprint-heist | web | 🌶️🌶️🌶️🌶️🌶️ (5/5) | 🏁 | 🤖 |
| HTB | try-out | omniwatch | web | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |
| HTB | try-out | an-unusual-sighting | forensics | 🌶️🌶️ (2/5) | 🏁 | 💪 |
| HTB | try-out | silicon-data-sleuthing | forensics | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 💪 |
| HTB | try-out | phreaky | forensics | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | flagcasino | reversing | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | lootstash | reversing | 🌶️🌶️ (2/5) | 🏁 | 🤖 |
| HTB | try-out | dont-panic | reversing | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | tunnelmadness | reversing | 🌶️🌶️🌶️ (3/5) | 🏁 | 🤖 |
| HTB | try-out | satellite-hijack | reversing | 🌶️🌶️🌶️🌶️ (4/5) | 🏁 | 🤖 |