<CTF Writeups />
Walkthroughs of CTF challenges from HackTheBox, TryHackMe, and more
HTB - False Witness
Predictable hash function that results in breaking the decisional problem by enumerating all group elements.
HTB - Fractured Seal
Recover RSA private key given leaked information from PEM file using Coppersmith's small roots
HTB - Thermal Receipt
Connect to PRET PJL mode, enumerate device files, recover the latest journal receipt, follow the NVRAM reference, and read NVRAM to recover the flag.
THM - BankGPT
This writeup demonstrates how to bypass a banking AI's security guardrails by chaining context manipulation and audit pretexting to ultimately extract hidden API keys through a subtle "Leakage in Refusal" vulnerability.
HTB - Caldrin's Day Away
This writeup details how to drain an ERC-4626-style vault in HTB's "Caldrin's Day Away" challenge by leveraging a massive flash loan to manipulate an AMM reserve, feeding the poisoned data through a flawed oracle to artificially inflate the vault's share price.