HackTheBox: Odori Writeup
Summary Odori ships as an offline forensics box: the only live services are SSH and Samba, and an anonymously readable backup share just points to a…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
- игры
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
HTB - UpDown Writeup - no Metasploit
Summary A .git repository was exposed on the public-facing website. By examining it, the web application’s architecture could be understood, includi…
PicoCTF First Grep Writeup — Find a Flag with grep
A large text file containing a huge amount of noise lines is provided. The grep command lets us search directly for the pattern picoCTF{ across all…
Разбор заданий ZeroNights HackQuest 2026
30 сентября мы провели конференцию по информационной безопасности ZeroNights 2026. Спасибо всем, кто решил поучаствовать! Без вас не было бы ни клас…
Как мы собирали CTF-комьюнити в вузе с нуля до международного турнира
CTF в КубГТУ существовал и до нас. Кафедра КТиИБ проводила KubanCTF ещё в 2017 году, на старших курсах были ребята, которые играли в своих составах.…
A binary CTF riddle that came down to one byte at a time
The "Binary Riddle" challenge on Com Olho gave me a line of binary numbers. Each group had eight digits. The description said something seemed off.…
Attacking APIs — Skills Assessment Writeup
Introduction Walking through my solve of the Attacking APIs Skills Assessment. This one chains weak authentication flows, insecure password reset me…
TryHackMe CC: Pen Testing - Full Walkthrough (2026)
Note: I originally published this guide on my blog, Cracking Station . This is the syndicated version. Everything here is performed inside the TryHa…
Ложка мёда в бочке уязвимостей: разбираем цепочку SSRF → IAM → RCE + бонус
Привет, Хабр! Меня зовут Владимир Аламов, я инженер по информационной безопасности и комьюнити-лидер сообщества Security Champions в Авито .&…
Bank — сложная машина от aclabs.pro со взломом пин-кода, пивотингом и побегом из контейнера
Сложный таск с 6 флагами и 2 машинами. В первой зоне видимости у нас Windows машина с вебом, через который получаем доступ по winrm с первым флагом.…
TryHackMe: Adventure Time Writeup
Summary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, stega…
PicoCTF Easy1 Writeup — Recover an XOR Key with Crib Dragging
The flag is XOR-encrypted with a short repeating key. Since we know every picoCTF flag starts with picoCTF{ , we XOR that known text ("crib") with t…
PicoCTF Substitution0 Writeup — Break a Substitution Cipher with Frequency Analysis
Unlike Caesar, each letter is replaced by a different letter according to an arbitrary mapping (not a simple shift). We solve it by comparing the le…
PicoCTF Mod 26 Writeup — Brute-Force a Caesar Cipher
The Caesar cipher has exactly 26 possible shifts (modulo the 26 letters of the alphabet). A Python script that tests all 26 shifts and looks for pic…
Взлом городского мессенджера: разбор цепочки атаки на машину Messenger на платформе Standoff 365
Статья рассчитана как на людей, близких к IT и ИБ, так и на тех, кто далек от этих областей. Автор постарался подробно разобрать каждый шаг: почему…
CTF на шее: разбираем задания бейджа OFFZONE 2026
20-21 августа прошла седьмая конференция практической кибербезопасности OFFZONE. Как и в предыдущие годы, бейдж OFFZONE оказался полноценным мини-CT…
BrunnerCTF : WordPressed to Root Writeup
Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kuber…
BrunnerCTF 2026 - Welcome Aboard (Web)
Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt ) returns a…
My AI Agent Captured the Flag. Then the Platform Refused to Accept It.
Today was a good day and a weird day, in that order. The good part: the autonomous pentest agent I've been building — I call it HALO — went from "ru…
TryHackMe : The London Bridge writeup
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…
We Built a Story-Driven Cybersecurity CTF with 14 Free Missions
Most CTFs are excellent at teaching a technique. But once the flag is captured, the context often disappears. We wanted to build something different…
TryHackMe : Packed Light Writeup
TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update…
187 064 инструкции ради одного флага: Разбор HTB Callfuscated (Insane)
Что делать, если статический анализ crackme выдает 187 064 инструкции мусорного кода? Идти в динамику! В этой статье разбираем таск Callfuscated с H…
HackTheBox : Void Whispers Writeup
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no…
BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…
BroncoCTF : Super Secure Server
Executive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's…
BroncoCTF : Spot the difference Writeup
Challenge We're given two files, file1.txt and file2.txt , each containing what looks like a long, random blob of letters, digits, and symbols — one…
BronoCTF : LEts a GO Writeup
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip , a 63 KB archive. $…
BroncoCTF : Atomic Substitution Theory Writeup
Challenge We're given secret.txt , a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2,…
BronocCTF : Proper Pwning Writeup
Category: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip cont…