--- title: "#ctf-writeup articles | Hashnode" description: "Explore 720 articles tagged #ctf-writeup on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/ctf-writeup" --- Tag # #ctf-writeup 720 posts · 60 followers [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-lottery-blockchain-css-ctf-2026-return-of-nexus/6af26e99a7de4158d8216f11) ### [CTF Writeup: Lottery | Blockchain | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-lottery-blockchain-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description Beyond the checkpoint, a Beltway Bandits gambling terminal has resumed broadcasting: "Ten wins in a row. One fortune. No second chances." Once used to distribute stolen credits, it now ho 7 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-lottery-blockchain-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-gateway-blockchain-css-ctf-2026-return-of-nexus/6af26e57c91512e319693f60) ### [CTF Writeup: Gateway | Blockchain | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-gateway-blockchain-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description The reboot has awakened an abandoned UPDC checkpoint guarding access to the Quantum Nexus Network. Its emergency gate still demands three proofs of clearance, but the officers who issued 7 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-gateway-blockchain-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-prince-walk-reverse-engineering-css-ctf-2026-return-of-nexus/6af26dfac91512e3196804cd) ### [CTF Writeup: Prince Walk | Reverse Engineering | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-prince-walk-reverse-engineering-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description One year after The Severance silenced the Quantum Nexus Network, your terminal receives a transmission from the Kuiper Belt Relay. Hidden inside it is an abandoned Polaris Logistics recov 6 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-prince-walk-reverse-engineering-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-flappy-board-reverse-engineering-css-ctf-2026-return-of-nexus/6af26b58ff586ac0cc0bd178) ### [CTF Writeup: Flappy Board | Reverse Engineering | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-flappy-board-reverse-engineering-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description The beacon reveals a stranded Polaris courier drone carrying a Nexus restoration packet. Its flight console, FLAPPY BOARD, still works, but corrupted departure timers hold it grounded and 10 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-flappy-board-reverse-engineering-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-colour-shift-forensics-css-ctf-2026-return-of-nexus/6af269c71ea7a90df35b4d0b) ### [CTF Writeup: Colour Shift | Forensics | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-colour-shift-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description In 1666 Issac Newton split light into their compositve wavelengths. Can you? Flag format: CSSCTF{...} We're given: colorshiftctf.bmp Overview This challenge hands us a single bitmap o 5 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-colour-shift-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [2d ago](https://hashnode.com/posts/ctf-writeup-ghost-frequency-forensics-css-ctf-2026-return-of-nexus/6af267798c0471ffe8679cde) ### [CTF Writeup: Ghost Frequency | Forensics | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-ghost-frequency-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description KBR-17's maintenance black box survived The Severance, but its final transmission never reached the Nexus archive. Relay documentation says the recorder captured two maintenance channel 11 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-ghost-frequency-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Anirudh](https://hashnode.com/@redtrib3) · [Nov 3](https://hashnode.com/posts/smarthire-hackthebox-writeup/6aea22dca01113fbb564430e) ### [SmartHire - hackthebox writeup](https://blog.redtrib3.in/smarthire-hackthebox-writeup?utm_source=hashnode&utm_medium=feed) Introduction Smarthire is a medium rated machine in hackthebox released off-season. This is the first box I submitted to hackthebox and was approved. I expected it to be approved as an easy box, but h 11 min read · [blog.redtrib3.in](https://blog.redtrib3.in/smarthire-hackthebox-writeup?utm_source=hashnode&utm_medium=feed) [Hareeshwar N K](https://hashnode.com/@H4x0rGh0st) · [Oct 30](https://hashnode.com/posts/path-hijacking-a-suid-log-rotator-from-tokyo-to-root/6ae420a839aae63efd551d03) ### [PATH Hijacking a SUID Log Rotator: From Tokyo to root](https://hareeshwarnk.hashnode.dev/path-hijacking-a-suid-log-rotator-from-tokyo-to-root?utm_source=hashnode&utm_medium=feed) A 250-point CTF exploitation challenge where a root-owned helper called \`backup\` by relative name handed me an effective UID of 0 after my first script failed for a reason I did not expect 6 min read · [hareeshwarnk.hashnode.dev](https://hareeshwarnk.hashnode.dev/path-hijacking-a-suid-log-rotator-from-tokyo-to-root?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 28](https://hashnode.com/posts/ctf-writeup-signal-fracture-forensics-css-ctf-2026-return-of-nexus/6ae1e0a3e990b94d64340bbd) ### [CTF Writeup: Signal Fracture | Forensics | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-signal-fracture-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description KBR-17 came back online for only fourteen seconds before the Nexus fabric collapsed again. A passive tap captured the relay's final uplink, and technicians recovered the relay drive exact 8 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-signal-fracture-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 28](https://hashnode.com/posts/ctf-writeup-the-false-timeline-forensics-css-ctf-2026-return-of-nexus/6ae1dafb6d689120c59f6bc6) ### [CTF Writeup: The False Timeline | Forensics | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-the-false-timeline-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description Nexus Incident Response recovered a filesystem image from Relay NX-17 after an unauthorised emergency key export. Investigators concluded that Relay Administrator KAI-7 performed the expo 9 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-the-false-timeline-forensics-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed)