--- title: "#pwn articles | Hashnode" description: "Explore 40 articles tagged #pwn on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/pwn" --- Tag # #pwn 40 posts · 6 followers [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 19](https://hashnode.com/posts/ctf-writeup-the-astrolobe-overwrite-misc-css-ctf-2026-return-of-nexus/6ad5ac273c408288df6a4052) ### [CTF Writeup: The Astrolobe Overwrite | Misc | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-the-astrolobe-overwrite-misc-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description When "The Severance" hit in 2100, the Kuiper Relay wasn't abandoned. Instead, it was locked into a loop governed by the Council. To prevent manual takeover, the council's instruction cons 8 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-the-astrolobe-overwrite-misc-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 12](https://hashnode.com/posts/ctf-writeup-maintenance-log-pwn-css-ctf-2026-return-of-nex/6acc5781a76920a868344352) ### [CTF Writeup: Maintenance Log | Pwn | CSS CTF 2026: Return of Nex](https://mollysohaney.hashnode.dev/ctf-writeup-maintenance-log-pwn-css-ctf-2026-return-of-nex?utm_source=hashnode&utm_medium=feed) Description Our diagnostics terminal logged an anomaly during maintenance. The vendor insists their service is fortified with stack canaries and safe from memory corruption, but the interface IS LEAK 6 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-maintenance-log-pwn-css-ctf-2026-return-of-nex?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 12](https://hashnode.com/posts/ctf-writeup-dockside-ticket-office-pwn-css-ctf-2026-return-of-nexus/6acc549e7e612994ed6780dd) ### [CTF Writeup: Dockside Ticket Office | Pwn | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-dockside-ticket-office-pwn-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description The dockside ticket office manages temporary harbour access tickets. You can create, cancel, edit, and use a ticket. A cancelled ticket should no longer be usable, but this old term 5 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-dockside-ticket-office-pwn-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 12](https://hashnode.com/posts/ctf-writeup-kuiper-belt-relay-core-pwn-css-ctf-2026-return-of-nexus/6acc46beace597bebb916f74) ### [CTF Writeup: Kuiper Belt Relay Core | Pwn | CSS CTF 2026: Return of Nexus](https://mollysohaney.hashnode.dev/ctf-writeup-kuiper-belt-relay-core-pwn-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) Description The Relay rebooted an old diagnostic process — it just echoes back whatever you send it. Simple by design. But it's still carrying dead code from before the blackout: a function that's 5 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-kuiper-belt-relay-core-pwn-css-ctf-2026-return-of-nexus?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 8](https://hashnode.com/posts/ctf-writeup-safe-house-pwn-sunshinectf-2026/6ac82cc6dddf9afd5277daa3) ### [CTF Writeup: Safe House | Pwn | SunshineCTF 2026](https://mollysohaney.hashnode.dev/ctf-writeup-safe-house-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) Description The safe house processes reports and files notes for the field. Get past the front desk and into the vault. nc chal.sunshinectf.games 26007 We're given: service Overview service is a 8 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-safe-house-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 8](https://hashnode.com/posts/ctf-writeup-codebreaker-pwn-sunshinectf-2026/6ac8275ac791e3c8532dd90d) ### [CTF Writeup: CodeBreaker | Pwn | SunshineCTF 2026](https://mollysohaney.hashnode.dev/ctf-writeup-codebreaker-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) Description CodeBreaker: enterprise-grade encrypted key-value storage. All traffic is encrypted with our proprietary cipher. Your data has never been safer. nc chal.sunshinectf.games 26005 We're g 9 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-codebreaker-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 8](https://hashnode.com/posts/ctf-writeup-homemaker-pwn-sunshinectf-2026/6ac80e9c98dc27da7477e228) ### [CTF Writeup: Homemaker | Pwn | SunshineCTF 2026](https://mollysohaney.hashnode.dev/ctf-writeup-homemaker-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) Description A SERVANT IN EVERY HOME, BY 1975! APEX ATOMIC HOUSEHOLD INDUSTRIES, INC IS PROUD TO ANNOUNCE THE MODEL 7 "HOMEMAKER" DOMESTIC AUTOMATON POWERED THROUGH USE OF PUNCH CARDS, THE MODEL 7 9 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-homemaker-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 8](https://hashnode.com/posts/ctf-writeup-print-print-revolution/6ac80ae597e73e00f945cd26) ### [CTF Writeup: Print Print Revolution](https://mollysohaney.hashnode.dev/ctf-writeup-print-print-revolution?utm_source=hashnode&utm_medium=feed) Print Print Revolution — SunshineCTF 2026 (pwn, 438 pts) Description The arcade's score printer has been spitting out strange tickets all week. Step up to the renderer and see what it's really printi 6 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-print-print-revolution?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 8](https://hashnode.com/posts/ctf-writeup-cache-money-pwn-sunsh/6ac7ff25618b34e87f9a0d1a) ### [CTF Writeup: Cache Money | Pwn | Sunsh](https://mollysohaney.hashnode.dev/ctf-writeup-cache-money-pwn-sunsh?utm_source=hashnode&utm_medium=feed) Description The arcade's credit manager tracks every wallet in the house. The books haven't been audited in years, so help yourself. nc chal.sunshinectf.games 26004 We're given: cache\_money Overv 6 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-cache-money-pwn-sunsh?utm_source=hashnode&utm_medium=feed) [Molly Sohaney](https://hashnode.com/@mollysohaney) · [Oct 7](https://hashnode.com/posts/ctf-writeup-mad-libs-pwn-sunshinectf-2026/6ac5ded0758d8ec6d94e907a) ### [CTF Writeup: Mad Libs | Pwn | SunshineCTF 2026](https://mollysohaney.hashnode.dev/ctf-writeup-mad-libs-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed) Description Fill in the blanks! Our Mad Libs game prints back whatever you type. It's just a simple word game... right? nc chal.sunshinectf.games 26001 We're given: mad\_libs Overview "Mad Libs" h 8 min read · [mollysohaney.hashnode.dev](https://mollysohaney.hashnode.dev/ctf-writeup-mad-libs-pwn-sunshinectf-2026?utm_source=hashnode&utm_medium=feed)