bubu
Click on the Slides button above to view the built-in slides feature. Slides can be added in a few ways: Create slides using Wowchemy’s Slides feature and link using slides parameter in the front matter of the talk file Upload an existing slide deck to static/ and link using url_slides parameter in the front matter of the talk file Embed your slides (e.g. Google Slides) or presentation video…
CVE-2025-66430, released on December 12, 2025 and discovered by Philip Okhonko , was assigned a CVSS score of 9.1. This vulnerability allows Plesk users with access to Protected Directories to perform remote code execution (RCE) on the server, potentially granting full control over the system, including emails, databases, and other sensitive data. In this article, I provide an in-depth analysis of…
Create your own alpaca and share it with your friends! AlpacaHack Daily challenge link: style-your-alpaca . If you only want solve script: solve.py . If we examine the challenge source code, we can see that it follows the typical bot-and-web setup, where the flag is stored in the bot’s cookie. The code also shows that the application deploys a CSP, however, it does not impose any…
During the last weekend, ASIS CTF Finals 2025 took place. I authored two challenges that appeared in the competition. Just to share some statistics: the CTF had 773 registered teams, 447 teams solved at least the sanity challenge, and 263 teams solved more than just the sanity. Before diving into the solution write-ups, you can download the challenges here: Bookmarks Challenge src . W4 Schools…
Last week, CrewCTF 2025 happened, and I created two web challenges for it. Technically, I ended up with three challenges. A last minute change opened the door to an unintended solution that players quickly started using, and to my surprise someone even posted a Medium writeup before the CTF ended. So, I had to release a revenge. This was my first time creating challenges for a competition, and I…
In this blog post, I will explain how to exploit permission hijacking on a large scale. To demonstrate this idea, I will use two companies (LiveChat and Glassix) where I discovered security issues as proof-of-concept (PoC). This blog post is based on research that, if the reviewers are kind, will eventually make its way into an academic conference. Those who know, know. Here I won’t cover the…
This past weekend was the SAS CTF Quals. SAS CTF is an international competition for cybersecurity experts, held as part of the Security Analyst summit (SAS) conference. Last year, I had the opportunity to participate in the finals as part of thehackerscrew team. I wrote a small travel blog about it. In these Quals, we qualified in 7th place, and I helped the team with a couple of challenges.…
The Hong Kong Productivity Council (HKPC) ( link ), in collaboration with other institutions and companies, organized this CTF competition. As you might expect, the finals took place in Hong Kong. Similar to my previous blog about TheSASCON CTF Finals , I’m sharing my experience from this event and my travel there. Arrival to Hong Kong 2 Days to the CTF Fortunately for me, the travel to the…
In this post, I’ll be covering the solutions to the web challenges from the HKCERT 2024 Qualifiers, with the exception of the final challenge. The competition lasted 48 hours, during which I only got four hours of sleep. The maximum team size for this CTF was four people. Thanks to the hard work of my teammates—KLPP, ItayB, and Aali—we secured 4th place and successfully qualified for the…
The Security Analyst summit (SAS) was a conference organized by the well-known AV company, among other things, Kaspersky. As with many conferences, this one also includes a CTF competition. The conference and CTF finals were held in Bali, Indonesia, from the 22nd to the 24th. This was my first on-site finals, located almost at the antipode of my hometown. In this blog entry, I share a short blog…
Last week I played OpenECSC - Round 1. My final individual position was 59 out of 1895. In this blog post, I, your web guy, will present the writeup for the three web challenges. In these three web challenges, we have access to the source code, eliminating the need for guess solutions. Furthermore, in all of them a docker-compose is provided. Fileshare [258 solves] You can now share your files for…
This write-up details my solution to Intigriti’s April challenge by strangeMMonkey1 . I will focus solely on the steps I took to solve the challenge, though it’s worth noting that I was stuck in some moments looking rabbit holes. I believe I was among the first ten person’s to successfully solve the challenge. The challenge starts with a login page ( /challenge.php ) in which you…
In this CTF we ( ISwearIGoogledIt ) achieve 99 position. SimpleFileServer [web][98 solves] Keywords: flask, cookie This web application challenge involves a website in which we are able to upload zip files and view the files inside the zip. If we check the Dockerfile we can see the files and folders that are involved in the challenge. In the Dockerfile we can also see that there is a flag binary…
LakeCTF event was hosted by the top team polygl0ts of EPFL University. This time I couldn’t spend much time so I just solved 3 challenges, achieving the 58 position out of 191 teams. The challenges I solved are from categories ‘pwn’ and ‘rev’. Apart from these three challenges, I spent most of my time trying the web challenge called ‘People’. I’m…
In this post I’m going to explain the challenges I solved during the HTB Cyber Apocalypse CTF. All of them are considered “Web” category. My team, called “ISwearIGoogledIt”, obtained the 139 place solving the half of the total challenges. Inspector Gadget In this challenge, you only needed to search the flag in the different parts of the web. The flag was divided…
En esta entrada explicaré mi experiencia con la certificación “Junior Penetration Testing” (eJPT) o conocida también como “Penetration Testing Student” (PTS). Esta certificación tiene, en el momento de escribir este artículo, un precio de $200 que, al cambio sale por 164€. En los siguientes apartados trataré de explicar como funciona la certificación además de expresar mi…
En este artículo describiré en qué ha consistido mi proyecto fin de grado de Ing. Informática, titulado “Investigación y desarrollo de técnicas de análisis de la seguridad web a partir de crawling” y presentado de forma telemática (por consecuencias del COVID-19) el día 30 de junio a las 10:30 con una duración de alrededor de 30 minutos (preguntas del tribunal incluidas). Investigación…
Write-up of the room Daily Bugle - TryHackMe . Difficulty: Hard 🔴 Daily Bugle Walkthrough [ES] [Task 1] Deploy En esta primera tarea únicamente debemos desplegar la máquina y esperar 5 minutos a que se configure: Después realizamos un escaneo inicial con Nmap para saber puertos abiertos y servicios/versiones: Y finalmente, para resolver esta tarea, simplemente debemos acceder a la máquina con el…
Write-up of the room Blog - TryHackMe . Difficulty: Medium 🟠 Blog Walkthrough [EN] [Task 1] Blog Deploy the machine and wait 5 minutes: My initial Nmap scan: Add the machine in /etc/hosts: Samba (SMB) port Enumerate Samba (SMB) shares: I searched inside the downloaded files, but all of them were rabbit holes: HTTP port First step was to use WhatWeb and Wappalyzer: Using the WPScan tool to scan…
Write-up of the room Anonymous - TryHackMe . Difficulty: Medium 🟠 Anonymous Walkthrough [EN] [Task 1] Pwn Deploy the machine and wait 5 minutes: My initial Nmap scan: Enumerate Samba (SMB) shares: Enumerate File Transfer Protocol (FTP) and the shares with the anonymous login: The file “clean.sh” seems to be a script which runs automatically at regular intervals (cronjob), printing the…
Write-up of the room PickleRick - TryHackMe . Difficulty: Easy 🟢 Pickle Rick Walkthrough [ES] [Task 1] Pickle Rick Desplegamos la máquina y esperamos 5 minutos a que se configure: Realizamos un escaneo inicial con Nmap: Como se ve en las capturas, nos encontramos con 2 puertos abiertos (ssh y http). Respecto al puerto SSH, solo nos podríamos plantear encontrar un exploit por la versión o hacer un…
Write-up of the room Skynet - TryHackMe . Difficulty: Easy 🟢 Skynet Walkthrough [EN] [Task 1] Deploy and compromise the vulnerable machine! Deploy the machine and wait 5 minutes: My initial Nmap scan: Search in the source code, robots, so on. Fuzzing the web directories I found a secret path: After exploring the samba shares, with the anonymous credentials, I found a possible user…
Write-up of the room Avengers Blog - TryHackMe . Difficulty: Easy 🟢 Avengers Blog Walkthrough [EN] [Task 1] Deploy Deploy the machine and wait 5 minutes. Initial scanning My initial scanning of the machine: [Task 2] Cookies Using the Cookie Editor extension to see the flag: Using the “Inspect Element” (F12 or right click) and entering in “Storage”: [Task 3] HTTP Headers We need to look at the…
Este es el primer post y espero que no el último de mi web. Intentaré asiduamente ir actualizandolo y añadiendo posts de diferentes temáticas interesantes como pueden ser WriteUps de HackTheBox, materia GNU/Linux, Write-Ups de TryHackMe, soluciones a CTF’s… En este primer post expondré la configuración que utilizo en mi portátil para el día a día. Tengo un arranque dual con Grub2, y a…
Create slides in Markdown with Wowchemy Wowchemy | Documentation Features Efficiently write slides in Markdown 3-in-1: Create, Present, and Publish your slides Supports speaker notes Mobile friendly slides Controls Next: Right Arrow or Space Previous: Left Arrow Start: Home Finish: End Overview: Esc Speaker notes: S Fullscreen: F Zoom: Alt + Click PDF Export Code Highlighting Inline code: variable…
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis posuere tellus ac convallis placerat. Proin tincidunt magna sed ex sollicitudin condimentum. Sed ac faucibus dolor, scelerisque sollicitudin nisi. Cras purus urna, suscipit quis sapien eu, pulvinar tempor diam. Quisque risus orci, mollis id ante sit amet, gravida egestas nisl. Sed ac tempus magna. Proin in dui enim. Donec condimentum,…