Tips on how to write exploit scripts (faster!)
TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.
Solutions (that we managed to find) for the 2021 PicoCTF
🎵 Official source code and writeups for SekaiCTF 2025!
CyberSec Blog
🎵 Official source code and writeups for SekaiCTF 2024!
CTF Writeups
TEAM BAY'S CTF WRITE UP
Hacking WordPress Plugins - Authenticated Shell Upload, by compromising admin console and upload a malicious plugin with PHP (reverse shell code)
Comprehensive walkthroughs and solutions for Hacker101 CTF challenges. Educational writeups covering web security vulnerabilities including XSS, SQL injection, authentication bypass, and more.
Things we learned from Capture The Flag hacking competitions we participated in
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
web based c2 🏴☠️
Write up of some solutions to the picoCTF 2023 from my submissions during the competition
Write ups to the CTF problems online.
Challenges of the alpha ctf 2022
A hands-on, 8-part Capture the Flag (CTF) curriculum covering cryptography, web exploitation, networking, digital forensics, and reverse engineering.
Blood Code CTF challenge repository! This repository contains all the challenges and their source files from the Capture The Flag event codenamed "Blood Code," organized by 0x4m4. It includes challenges in cryptography, steganography, digital forensics, pwn, pyjail, reverse engineering, and web exploitation, designed for all skill levels.
To associate your repository with the web-exploitation topic, visit your repo's landing page and select "manage topics."