Blog

Filter

BSides Galway 2026 CTF: Intro [Web] WriteUp

Solved the Intro web challenge at BSides Galway 2026 CTF by finding a hidden HTML comment, deobfuscating JSFuck, and sending a crafted HEAD request with curl.

BoardLight [HTB] — Writeup

Pwned HTB machine BoardLight via vhost enumeration, Dolibarr default creds, CVE-2023-30253 RCE, and Enlightenment CVE-2022-37706 privilege escalation to root.

BSides Galway 2025 CTF: Packed [Reverse Engineering] WriteUp

Solved the Packed RE challenge at BSides Galway CTF by identifying a UPX-packed executable, unpacking it, and finding the flag in the main function via BinaryNinja.

PearlCTF 2024: The-3-Fragmenteers [Forensics] WriteUp

Solved The-3-Fragmenteers by analysing a Windows memory dump with Volatility3, recovering three hidden file fragments, and reassembling them into a PDF containing the flag.