Writeups

9 writeups from 6 events.

web VuwCTF 2026

Moosespell

Challenge I solved at VuwCTF 2026. Stored XSS
web TJCTF 2026

Paper-Trail

Challenge I solved at TJCTF 2026. Textbook JWT forgery
web RITSEC CTF 2026

Cascading the Seven Seas

Challenge I solved at RITSEC CTF 2026. Extracting memory from a CSS VM and reverse-engineering
web ASIS CTF Final 2025

Sanchess

Challenge I solved at ASIS CTF Final 2025. Python eval injection via a chess app API to extract a flag using blind binary search.
web WinterCTF 2025

Forger

Challenge I solved at WinterCTF 2025. Leaking a Flask secret key from git history to forge an admin session cookie.
reversing WinterCTF 2025

Glacier Sled Ride

Challenge I solved at WinterCTF 2025. Reversing a .NET binary to extract and decrypt a flag.
pwn WinterCTF 2025

Pikamans

Challenge I solved at WinterCTF 2025. Stack buffer overflow to manipulate hp and lvl variables in a C binary.
reversing WinterCTF 2025

Quad-Encoding

Challenge I solved at WinterCTF 2025. Automated decoding through 58 layers of Base64, zlib, hex, and binary.
web VuwCTF 2025

Fishsite

Challenge I solved at VuwCTF 2025. SQL injection and blind SQLi to extract a flag.