Opportunity Crawler banner Animated banner showing a terminal-style pipeline from scraper to Telegram, with scrolling job titles and AI scores opportunity-crawle...

Intro Hey folks, how's it going? I just vibe coded a tool which is very helpfull in solving many rooms in forensics, i have done forensics challenges by manually scanning the files so y not do it...

Overview A four-flag box built around one central idea: every service in the chain trusts input it shouldn’t. The path goes SSRF → indirect prompt injection → credential leak → DNS-manager pivot →...

Byte Lotus Wellness – Cognito Guest Credentials & DynamoDB IAM Misconfiguration Overview During this challenge, I encountered a web application called Byte Lotus Wellness. The application was...

Exploiting a Stored Cross-Site Scripting (XSS) vulnerability in the Cupid challenge to retrieve the administrator's cookie and obtain the flag.

Overview LoveNote is a Valentine’s Day themed messaging app built with Flask. Each user gets an RSA keypair on registration, used to automatically sign messages sent through the platform. The core...

Hey everyone, This is my full writeup for Fools Mate, Revenge — the sequel to Fools Mate. Same chess app, completely different vulnerability. I’m going to walk through every attempt I made, includ...

Hey everyone, This is my full writeup for Fools Mate, a web exploitation CTF room. I want to walk through the entire thought process — including the dead ends — so that every decision I made is vi...

Hey everyone, This is my writeup for the Block room on TryHackMe. This one was a proper network forensics challenge — no web exploits, no brute force on services. Just two artifact files and your ...

So I’ve been getting into CTF challenges and ethical hacking lately, and I wanted a local AI assistant that I could use for security research without worrying about sending sensitive data to the cl...