YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 22 · 10 min readTryHackMe : Fool's Mate RevengeSummary This is the sequel to the original Endgame Trainer box. The developer clearly read that writeup - the client-side "don't let the player actually win" gate is gone entirely, and the win conditi00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 22 · 8 min readTryHackMe : FoolMate WriteupSummary Endgame Trainer is a small web app that presents a "mate-in-one" chess puzzle. The board is legit (built on the chess.js library), but the app has a gimmick: if you actually play the winning m00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 14 · 9 min readHackTheBox : JinjaCareSummary JinjaCare is a Flask-based COVID-19 vaccination verification web app. The intended path chains wkhtmltopdf HTML/local-file injection (via the certificate-generation feature) to disclose the Fl00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 6 min readCTF Writeup: Consistently Static Psuedo Random Number Generator | Crypto | BroncoCTF 2026Description I made a birthday oracle recently, but I can't get it to work at all. It only gets the day of the week right 14% of the time! Here are my results from the last testing session... can you 00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 4 min readCTF Writeup: Lovely Login | Web | BroncoCTF 2026Description Welcome to our lovely new login page 💕. The developers swear it’s secure… but they may have forgotten to clean up a few things before launch. Can you figure out how authentication works 00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 4 min readCTF Writeup: Mirror Mirror | RE | BroncoCTF 2026Description I've been told that this magic mirror will only clear when I give it the flag. Can you help me figure out what I should say? We're given: mirror.py Overview This challenge revolves arou00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 6 min readCTF Writeup: Cat Simulator | RE | BroncoCTF 2026Description Make the purrfect choices over 5 days to win your owner's heart… and maybe something more? Meow carefully. We're given: cat-sim-mac Overview This challenge is a "cat simulator" CLI game00
MSMolly Sohaneyinmollysohaney.hashnode.dev·Jul 13 · 5 min readCTF Writeup: The Keymaster | OSINT | Beginner | BroncoCTF 2026Description The Keymaster has split a flag into 8 keys and hid them in plain sight. Quite literally, as they're on our advertisement page! Ready your cursor-pointers, pull out your trusty inspectio00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 7 min readBronocCTF : Proper Pwning WriteupCategory: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip containing four files: $ unzip proper.zip Archive: prop00
