Git Good
Scrubbed creds that only left the working tree. git log the tooling project, check out the initial commit, and pull the service password from the old config.py to become the next user and grab their flag.
2026-10-19 | Last updated
Cybersecurity
CTF Writeups
Projects
My little blog with writeups, setups, tools and notes from the offensive side of things.
Cybersecurity · CTF Writeups
$ Latest Writeups
Looking Back
Sloppy operator left a password in shell history. Read ~/.bash_history from the svc-deploy foothold to find creds echoed into chpasswd, su to that user, and read their flag.
Doctor Appointment 1
SQLi auth-bypass in a healthcare login. Send the injection to the API and read the full JSON response - it leaks the username, password and flag.
$ Projects
HTB CPTS Path
HTB Certified Penetration Testing Specialist (HTB CPTS) is a highly hands-on certification that assesses the candidates penetration testing skills.
15.2% complete
p4ss_g3n
A command-line password generator built in Python, focused on security-first design. Built as a learning Python project with the though of eventually evolving into a full password manager.
→ github