Tips on how to write exploit scripts (faster!)
TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.
Solutions (that we managed to find) for the 2021 PicoCTF
🎵 Official source code and writeups for SekaiCTF 2025!
CyberSec Blog
🎵 Official source code and writeups for SekaiCTF 2024!
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
CTF Writeups
TEAM BAY'S CTF WRITE UP
Comprehensive walkthroughs and solutions for Hacker101 CTF challenges. Educational writeups covering web security vulnerabilities including XSS, SQL injection, authentication bypass, and more.
Hacking WordPress Plugins - Authenticated Shell Upload, by compromising admin console and upload a malicious plugin with PHP (reverse shell code)
Things we learned from Capture The Flag hacking competitions we participated in
web based c2 🏴☠️
Write up of some solutions to the picoCTF 2023 from my submissions during the competition
Blood Code CTF challenge repository! This repository contains all the challenges and their source files from the Capture The Flag event codenamed "Blood Code," organized by 0x4m4. It includes challenges in cryptography, steganography, digital forensics, pwn, pyjail, reverse engineering, and web exploitation, designed for all skill levels.
Write ups to the CTF problems online.
A hands-on, 8-part Capture the Flag (CTF) curriculum covering cryptography, web exploitation, networking, digital forensics, and reverse engineering.
Challenges of the alpha ctf 2022
To associate your repository with the web-exploitation topic, visit your repo's landing page and select "manage topics."