Recent posts feed

• ---

  0CTF/TCTF 2023 how2compile

  This week, my team DiceGang played 0CTF/TCTF, and I had time to look at one challenge - how2compile, reversing a custom rustc_driver binary. Having contributed to Rustc before, I was particularly interested in this challenge, and the experience definitely helped me save some time identifying the program’s workings.

• ---

  HFSAntiCheat - Midnight Sun Finals 2023

  This week I went to Midnight Sun CTF Finals 2023 in Stockholm, organised by HackingForSoju. I played with DiceGang Bleen, and mainly worked on guessboy (a really fun GameBoy pwn challenge on a physical GameBoy Color) and HFSAntiCheat, a Windows Kernel pwn challenge.

• ---

  labyrinth - Google CTF Quals 2022

  Segfault Labyrinth was a Misc shellcoding challenge from Google CTF Quals 2022. I spent several hours more than I should have on it due to a misunderstanding!

• ---

  dumpme - justCTF 2022

  I played justCTF 2022 with DiceGang. One challenge I solved, dumpme, was similar to readflag but with a twist.

• ---

  zer0pts CTF 2022

  I played zer0pts CTF 2022 with my team, Crusaders of Rust. Here’s a couple of challenges I solved.

• ---

  ASCII Art As A Service (ASIS CTF Quals 2021)

  A writeup for ASCII Art As A Service, from ASIS CTF Quals.

• ---

  Outfoxed (corCTF 2021)

  A writeup for Outfoxed, my Firefox/SpiderMonkey pwn challenge, featured in corCTF 2021

• ---

  Exploring Netsh

  An unsuccessful attempt to use netsh to make RoguePotato work.

• ---

  HTB - Travel

  Travel was a tough but enjoyable box, which forced me to think outside of the box in order to make progress.

  

• ---

  HTB - Jarvis

  Jarvis was the first box I ever touched, and I think it has a good range of vulnerabilties and attack surfaces.

  

• ---

  HTB - Writeup

  Writeup was one of the first boxes I did when I joined Hackthebox. It definitely helped to introduce me to basic web enum skills without relying on scripts, exploit finding and local privilege escalation. It had a very interesting path to root, which was tricky to spot but fun to exploit.

  

Who am I?

A teenager from the UK who’s very interested in computing, cybersecurity and CTFs.

What is this site?

A blog where I’ll be posting projects I’m working on, HackTheBox writeups, and anything else I find interesting.

Profiles:

Twitter

GitHub