AMAdbin Magarinthegreylens.hashnode.dev·11h ago · 4 min readDay-04: TryHackme [Simple CTF] room WalkthroughHi! I'm Adbin Magar, the researcher behind TheGreyLens. If you’ve seen my previous blogs, you know I’m currently tackling a daily CTF challenge where I complete TryHackMe rooms and document the proces00
AMAdbin Magarinthegreylens.hashnode.dev·3d ago · 3 min readDay-02: TryHackme [Bounty Hacker] room WalkthroughHi! This is Day 2 of my CTF daily challenge walkthrough. I am Adbin Magar the researcher behind TheGreyLens. Join me as I tackle the 'Bounty Hacker' CTF room on TryHackMe. Question 1: Deploy the machi00
YPYogesh Peelainexploitnotes.hashnode.dev·3d ago · 6 min readHackthebox: Forgotten WriteupSummary Forgotten is a HckTheBox machine centered around an exposed LimeSurvey installer endpoint that was never properly secured post-deployment. By spinning up a rogue MySQL server, an attacker can 00
RPRebika Parajuliinpico-ctf.hashnode.dev·Jun 12 · 2 min readFirst Grep | CyLab Security Academy (PicoCTF)First Grep is a General Skill, easy challenge intending on the use of Grep tool. We are provided with the following details along with a file containing flag. Can you find the flag in the file? This w00
VGVivek Goswamiinvivekgoswami.hashnode.dev·Jun 9 · 2 min readKrioptrix Level-3 WalkthroughIt’s a Basic level machine you can find it on Vulnhub Machine Info: Difficulty: Easy Goal: Gain root access Before starting, add an entry for kioptrix3.com in the /etc/hosts file. As usual the fir00
YPYogesh Peelainexploitnotes.hashnode.dev·Jun 8 · 5 min readRender & Plunder - dalCTF 2026Challenge: Render & PlunderCategory: Web Security / Defense Challenge Description I wrote a user-profile service with a nice renderer for myself. Surely it's secure, right? Take a look and patch any00
YPYogesh Peelainexploitnotes.hashnode.dev·Jun 8 · 4 min readIceman - dalCTF 2026Flag: dalctf2026{open-ticket-send-me-ur-fav-song-in-album6}Category: Web / GraphQL / JWT Overview A music-themed GraphQL API protected by JWT-based tier access control. The goal was to escalate from 00
YPYogesh Peelainexploitnotes.hashnode.dev·Jun 8 · 4 min readWeird Movements - dalCTFCategory: Forensics Flag: dalctf{h3h3_i_s2_p41nt} Overview We're given a packet capture. The capture turns out to be a Linux USB HID (mouse) trace — the user held left-click and physically drew the 00
NNirgunahincyberspace-flagfinder.hashnode.dev·May 17 · 1 min readStrings it-General Skills-picoCTF WriteUpAbout Strings The strings command in Linux is a utility used to print printable character sequences found in binary files. It is primarily used by developers and security analysts to extract human-rea00
NNirgunahincyberspace-flagfinder.hashnode.dev·May 16 · 2 min readWave a flag-General Skills-picoCTF WriteUpLast time we learnt how to execute a compiled C executable file. In this case we have a binary file. It can be binary file of any origin. Let us see the problem statement first. Can you invoke help f00