Brunner Mifflin (Root)
IT terminal creds + sudo NOPASSWD on /usr/bin/mail. GTFOBins payload spawns a root shell for the flag.
2026-09-02 | Last updated
Cybersecurity
CTF Writeups
Projects
My little blog with writeups, setups, tools and notes from the offensive side of things.
Cybersecurity · CTF Writeups
$ Latest Writeups
Brunner Mifflin (User)
IDOR + broken access control in an HR web app. Manipulate a client-side role in localStorage to unlock admin access and grab the flag.
Force Push
A force-push hid a commit, but ORIG_HEAD and the dangling object survived. Recovered the leaked reliquary credentials.
$ Projects
HTB CPTS Path
HTB Certified Penetration Testing Specialist (HTB CPTS) is a highly hands-on certification that assesses the candidates penetration testing skills.
15.2% complete
p4ss_g3n
A command-line password generator built in Python, focused on security-first design. Built as a learning Python project with the though of eventually evolving into a full password manager.
→ github