The React2Shell Story and What Happened Next.js

2026-05-08 react2shell writeup

How we discovered CVE-2025-55182 and what happened in the aftermath

read more →

Using BMP Polyglots to get RCE

2025-08-25 ctf writeup web

My solution to the 2025 HITCON CTF challenge “IMGC0NV”

read more →

2025-04-22 ctf writeup crypto web misc

Winning mental poker using properties of finite fields, deconstructing a zip bomb, and someone put a pyjail in my web

read more →

2025-02-10 ctf writeup rev web

Reversing a Scratch clone of Celeste and exploiting a NextJS misconfiguration

read more →

2025-01-19 ctf writeup pyjail

Two pyjails, log4j, and a usb pcap

read more →

2025-01-15 ctf rev writeup

My solution to the UofTCTF 2025 challenge Bloatware

read more →

2024-11-02 ctf writeup osint rev

Writeups for my favorite challenges from the 2024 Huntress CTF

read more →