Force Push
A force-push hid a commit, but ORIG_HEAD and the dangling object survived. Recovered the leaked reliquary credentials.
2026-07-30 | Last updated
Cybersecurity
CTF Writeups
Projects
My little blog with writeups, setups, tools and notes from the offensive side of things.
Cybersecurity · CTF Writeups
$ Latest Writeups
The Compressed Truth
Analyzing NTUSER.DAT hives with RegRipper to trace CROWQUILL's stolen-credential access to vmarr's machine, uncovering KeeFarce credential theft and a staged/exfiltrated archive via 7-Zip artifacts.
Massagold
Stored XSS via unescaped EJS output, CSP bypassed using a Google JSONP endpoint, payload delivered to an admin bot that exfiltrated the flag from the admin inbox back to us.
$ Projects
HTB CPTS Path
HTB Certified Penetration Testing Specialist (HTB CPTS) is a highly hands-on certification that assesses the candidates penetration testing skills.
11.9% complete
p4ss_g3n
A command-line password generator built in Python, focused on security-first design. Built as a learning Python project with the though of eventually evolving into a full password manager.
→ github