Security Writeups & CTF Notes

Real-world vulnerability research, CTF solutions, and offensive security notes. Documenting the exact methodologies, tools, and defensive takeaways from 157+ solved rooms.

TryHackMe

Top 3%

Rooms Solved

157+

AoC Side Quest

~0.1% Finish

Focus Areas

Red Team & RE

Active Directory & Pivoting•TryHackMe•Hard•16 min read

TryHackMe Advent of Cyber 2025: Hoppers Origin — Complete Walkthrough

A complete walkthrough of the Advent of Cyber 2025 Side Quest (~0.1% finish rate): AI prompt injection, Linux SUID symlink privilege escalation, Ligolo-ng pivoting, Kerberos AS-REP roasting, and Domain Controller takeover.

#Active Directory#AI Prompt Injection#Network Pivoting#Ligolo-ng#Kerberos#Pass-the-Hash#Privilege Escalation

Read Full

Web Security•PortSwigger•Expert•18 min read

HTTP Request Smuggling: Complete PortSwigger Web Security Academy Labs (1–10)

Comprehensive breakdown of 10 PortSwigger Web Security Academy labs covering byte calculation mathematics, internal header extraction, session hijacking, zero-click reflected XSS, and response queue desynchronization.

#HTTP Request Smuggling#CL.TE / TE.CL#HTTP/2 Downgrade#Web Security#Burp Suite#AppSec

Read Full

Binary Exploitation•TryHackMe•Easy-Medium•11 min read

TryHackMe: Buffer Overflow Prep — Step-by-Step Stack-Based Exploitation

A complete guide to stack-based buffer overflows for OSCP preparation: socket fuzzing, cyclic pattern offset calculation, memory bad character analysis, Mona pointer hunting, and custom reverse shell execution.

#Buffer Overflow#Binary Exploitation#OSCP#Immunity Debugger#Mona.py#Reverse Shell

Read Full