Popular repositories Loading

1. Bithug Bithug Public

   This is a difficult web exploitation task. To solve it, I must exploit a Server-Side Request Forgery (SSRF) vulnerability in Git webhooks and use template injection. This allowed me to gain admin p…

   1

2. secure-email-service secure-email-service Public

   A simulated secure email service using S/MIME for signing emails. The goal is to steal the admin's browser local storage flag by exploiting flaws in email parsing and rendering.

3. WebNet1 WebNet1 Public

   This network forensics challenge involves analyzing a PCAP file. I use the provided RSA private key with Wireshark and ssldump to decrypt TLS-encrypted web traffic and uncover a hidden flag. Proves…

4. Surfing-the-Waves Surfing-the-Waves Public

   This challenge involves analyzing a WAV audio file for hidden data (steganography). The file contains encoded hexadecimal data embedded in the audio samples.

5. Noted-challenge Noted-challenge Public

   This challenge is a hard web exploitation task involving self-XSS, Puppeteer automation in a headless browser, and data exfiltration. The goal is to steal the flag from a note created by a bot.

6. CCT2019-U.S.-Navy-Cyber-Competition-Assessment CCT2019-U.S.-Navy-Cyber-Competition-Assessment Public

   This challenge focusing on network forensics and packet analysis using Wireshark. I must analyze PCAP files, images, and other data to find flags and progress through the challenge.