This is just a test. Descriptions should go herehttps://cristi075.github.io/https://cristi075.github.io/posts/bitdefender-grand-prix-2025-mars/https://cristi075.github.io/posts/bitdefender-grand-prix-2025-mars/Writeup for the Mars challenge from BitDefender Grand Prix 2025. This challenge involved finding some hidden strings starting from a image file.Tue, 21 Jul 2026 21:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2025-dashboarded/https://cristi075.github.io/posts/htb-business-ctf-2025-dashboarded/Writeup for the Dashboarded challenge from HTB's Business CTF 2025. This challenge involved exploiting a SSRF vulnerability in an AWS app and some simple post-exploitation techniques.Sat, 24 May 2025 21:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2025-echoes-of-authority/https://cristi075.github.io/posts/htb-business-ctf-2025-echoes-of-authority/Writeup for the Echoes of Authority challenge from HTB's Business CTF 2025. This challenge involved decoding a RTP stream and decoding data sent over DTML.Sat, 24 May 2025 21:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2025-vault/https://cristi075.github.io/posts/htb-business-ctf-2025-vault/Writeup for the Vault challenge from HTB's Business CTF 2025. This challenge involved exploiting a misconfigured application using s3Sat, 24 May 2025 21:00:00 GMThttps://cristi075.github.io/posts/dctf-quals-2023-awesome-one/https://cristi075.github.io/posts/dctf-quals-2023-awesome-one/Writeup for the AwesomeOne challenge from the D-CTF Qualifiers 2023. This was very relatively simple reverse engineering.Sun, 22 Oct 2023 10:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2023-cyberpunk-cafe/https://cristi075.github.io/posts/tenablectf-2023-cyberpunk-cafe/Writeup for the Cyberpunk Cafe challenge from TenableCTF 2023. This was a relatively simple steganography challenge.Thu, 10 Aug 2023 21:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2023-pseudorandom/https://cristi075.github.io/posts/tenablectf-2023-pseudorandom/Writeup for the PseudoRandom challenge from TenableCTF 2023. This was a relatively simple cryptography challenge.Thu, 10 Aug 2023 21:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2023-langmon/https://cristi075.github.io/posts/htb-business-ctf-2023-langmon/Writeup for the Langmon challenge from HTB's Business CTF from 2023. This challenge involved exploiting a wordpress exploit and a langmon exploit.Sun, 16 Jul 2023 21:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2023-unveiled/https://cristi075.github.io/posts/htb-business-ctf-2023-unveiled/Writeup for the Unveiled challenge from HTB's Business CTF from 2023. This challenge involved exploiting a misconfigured s3 service.Sun, 16 Jul 2023 21:00:00 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-orbital/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-orbital/Writeup for the Orbital (Web, Easy) from HTB Cyber Apocalypse 2023. This very simple challenge involved SQL Injection and a path traversal attack.Thu, 23 Mar 2023 12:00:06 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-relic-maps/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-relic-maps/Writeup for the Relic Maps (Forensics, Medium) from HTB Cyber Apocalypse 2023. This challenge involved deobfuscating some batch scripting and some powershell.Thu, 23 Mar 2023 12:00:05 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-hm74/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-hm74/Writeup for the HM74 (Hardware, Medium) from HTB Cyber Apocalypse 2023. Here you can see my janky solution to a challenge that involved error correction codes (Hamming Codes).Thu, 23 Mar 2023 12:00:04 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-secret-code/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-secret-code/Writeup for the Secret Code (Hardware, Easy) from HTB Cyber Apocalypse 2023. This is how I used Excel to solve a CTF challenge about seven segment displays :)Thu, 23 Mar 2023 12:00:03 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-debug/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-debug/Writeup for the Debug (Hardware, Easy) from HTB Cyber Apocalypse 2023. This challenge involved analyzing an UART signal.Thu, 23 Mar 2023 12:00:02 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-timed-transmission/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-timed-transmission/Writeup for the Timed Transmission (Hardware, Very Easy) from HTB Cyber Apocalypse 2023. This very simple challenge involved a capture from a logic analyzer.Thu, 23 Mar 2023 12:00:01 GMThttps://cristi075.github.io/posts/htb-cyber-apocalypse-2023-critical-flight/https://cristi075.github.io/posts/htb-cyber-apocalypse-2023-critical-flight/Writeup for the Critical Flight (Hardware, Very Easy) from HTB Cyber Apocalypse 2023. This very simple challenge involved some PCB designs.Thu, 23 Mar 2023 12:00:00 GMThttps://cristi075.github.io/posts/htb-redpanda-writeup/https://cristi075.github.io/posts/htb-redpanda-writeup/Writeup for HackTheBox.eu's RedPanda machine. Notes on how I obtained the user and root flags.Sat, 03 Dec 2022 17:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-forensics1-wrong-spooky-season/https://cristi075.github.io/posts/htb-hacktheboo-2022-forensics1-wrong-spooky-season/Writeup for the Wrong Spooky Season challenge (Forensics1/5) from HackTheBoo 2022. This challenge involved some simple analysis of a pcap file.Thu, 27 Oct 2022 15:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-forensics2-trick-of-breach/https://cristi075.github.io/posts/htb-hacktheboo-2022-forensics2-trick-of-breach/Writeup for the Trick of Breach challenge (Forensics2/5) from HackTheBoo 2022. This challenge involved analyzing some DNS traffic and reconstructing exfiltrated data.Thu, 27 Oct 2022 15:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-forensics3-halloween-invitation/https://cristi075.github.io/posts/htb-hacktheboo-2022-forensics3-halloween-invitation/Writeup for the Halloween Invitation challenge (Forensics3/5) from HackTheBoo 2022. This challenge involved analyzing an infected doc file.Thu, 27 Oct 2022 15:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-forensics4-poof/https://cristi075.github.io/posts/htb-hacktheboo-2022-forensics4-poof/Writeup for the POOF challenge (Forensics4/5) from HackTheBoo 2022. This challenge involved performing both network and memory forensics for a host that was infected by ransomware.Thu, 27 Oct 2022 15:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-forensics5-downgrade/https://cristi075.github.io/posts/htb-hacktheboo-2022-forensics5-downgrade/Writeup for the Downgrade challenge (Forensics5/5) from HackTheBoo 2022. This challenge involved analyzing Windows evtx logs and identifying a suspicious login.Thu, 27 Oct 2022 15:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-web1-evaluation-deck/https://cristi075.github.io/posts/htb-hacktheboo-2022-web1-evaluation-deck/Writeup for the Evaluation Deck challenge (Web1/5) from HackTheBoo 2022. This challenge involved exploiting a command injection vulnerability in a Flask application.Thu, 27 Oct 2022 13:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-web2-spookifier/https://cristi075.github.io/posts/htb-hacktheboo-2022-web2-spookifier/Writeup for the Spookifier (Web2/5) from HackTheBoo 2022. This challenge involved exploiting a template injection vulnerability in a Flask application that used Mako as its templating engine.Thu, 27 Oct 2022 13:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-web3-horror-feeds/https://cristi075.github.io/posts/htb-hacktheboo-2022-web3-horror-feeds/Writeup for the Horror Feeds challenge (Web3/5) from HackTheBoo 2022. This challenge involved exploiting a SQL Injection vulnerability in a Flask application ... with a bit of a twist.Thu, 27 Oct 2022 13:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-web4-juggling-facts/https://cristi075.github.io/posts/htb-hacktheboo-2022-web4-juggling-facts/Writeup for the Juggling Facts challenge (Web4/5) from HackTheBoo 2022. This challenge involved exploiting a type juggling vulnerability in a php application.Thu, 27 Oct 2022 13:00:00 GMThttps://cristi075.github.io/posts/htb-hacktheboo-2022-web5-cursed-secret-party/https://cristi075.github.io/posts/htb-hacktheboo-2022-web5-cursed-secret-party/Writeup for the Cursed Secret Party challenge (Web5/5) from HackTheBoo 2022. This challenge involved exploiting a Stored XSS vulnerability and bypassing the CSP.Thu, 27 Oct 2022 13:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2022-breakout/https://cristi075.github.io/posts/htb-business-ctf-2022-breakout/Writeup for the Breakout challenge from HTB's Business CTF from 2022.Sun, 17 Jul 2022 19:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2022-linas-invitation/https://cristi075.github.io/posts/htb-business-ctf-2022-linas-invitation/Writeup for the 'Lina's Invitation' challenge from HTB's Business CTF from 2022.Sun, 17 Jul 2022 19:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2022-perseverance/https://cristi075.github.io/posts/htb-business-ctf-2022-perseverance/Writeup for the Perseverance challenge from HTB's Business CTF from 2022.Sun, 17 Jul 2022 19:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2022-trade-writeup/https://cristi075.github.io/posts/htb-business-ctf-2022-trade-writeup/Writeup for the Trade challenge from HTB's Business CTF from 2022. This challenge involved interacting with and exploiting two AWS services (AWS SNS and DynamoDB)Sun, 17 Jul 2022 19:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2022-characters-of-shakespeares-plays/https://cristi075.github.io/posts/tenablectf-2022-characters-of-shakespeares-plays/A short writeup for "Characters of Shakespeare's Plays" (TenableCTF 2022)Mon, 13 Jun 2022 17:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2022-data-exfil-forensics/https://cristi075.github.io/posts/tenablectf-2022-data-exfil-forensics/Writeups for the "Data Exfil" challenge from TenableCTF 2022Mon, 13 Jun 2022 17:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2022-osint/https://cristi075.github.io/posts/tenablectf-2022-osint/Writeups for 3 out of 4 OSINT challenges from TenableCTF 2022Mon, 13 Jun 2022 17:00:00 GMThttps://cristi075.github.io/posts/htb-paper-writeup/https://cristi075.github.io/posts/htb-paper-writeup/Writeup for HackTheBox.eu's Paper machine. Notes on obtaining the user and root flags for this machine.Mon, 14 Mar 2022 09:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2021-rocket-writeup/https://cristi075.github.io/posts/htb-business-ctf-2021-rocket-writeup/Writeup for the Rocket challenge from HTB's Business CTF from 2021. This was part of their full pwn category which involved getting user and root flags from machines.Thu, 29 Jul 2021 17:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2021-badransomware-writeup/https://cristi075.github.io/posts/htb-business-ctf-2021-badransomware-writeup/Writeup for the BadRansomware challenge from HTB's Business CTF from 2021. This challenge showcased some techniques used by real malware.Wed, 28 Jul 2021 17:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2021-noteql-writeup/https://cristi075.github.io/posts/htb-business-ctf-2021-noteql-writeup/Writeup for the NoteQL challenge from HTB's Business CTF from 2021. The challenge involved an unsecured GraphQL endpoint.Tue, 27 Jul 2021 17:00:00 GMThttps://cristi075.github.io/posts/htb-business-ctf-2021-theta-writeup/https://cristi075.github.io/posts/htb-business-ctf-2021-theta-writeup/Writeup for the Theta challenge from HTB's Business CTF from 2021. This challenge involved a unsecured aws Lambda service.Tue, 27 Jul 2021 17:00:00 GMThttps://cristi075.github.io/posts/htb-bucket-writeup/https://cristi075.github.io/posts/htb-bucket-writeup/Writeup for HackTheBox.eu's Bucket machine. Notes on obtaining the user and root flags.Sun, 09 May 2021 15:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2021-tenable-challenges/https://cristi075.github.io/posts/tenablectf-2021-tenable-challenges/This is my writeup for the Tenable challenges that I could solve at TenableCTF 2021 and some of my thoughts on the one that I could not solve..Tue, 23 Feb 2021 17:00:00 GMThttps://cristi075.github.io/posts/tenablectf-2021-netrunner-encryption-writeup/https://cristi075.github.io/posts/tenablectf-2021-netrunner-encryption-writeup/This is my writeup for the Netrunner Encryption challenge from TenableCTF 2021. It involves a chosen plaintext attack against AES-ECB-128.Mon, 22 Feb 2021 15:00:00 GMThttps://cristi075.github.io/posts/htb-worker-writeup/https://cristi075.github.io/posts/htb-worker-writeup/Writeup for HackTheBox.eu's Worker machine. Notes on obtaining the user and root flags and also some failures in trying to get a root shell.Sun, 07 Feb 2021 15:00:00 GMThttps://cristi075.github.io/posts/htb-tabby-writeup/https://cristi075.github.io/posts/htb-tabby-writeup/This is my first attempt at making a writeup for a HackTheBox machine. It contains my notes on how I obtained both the user and root flag on the Tabby machine.Tue, 08 Dec 2020 15:00:00 GMThttps://cristi075.github.io/posts/de1ctf-2019-mine-sweeping-writeup/https://cristi075.github.io/posts/de1ctf-2019-mine-sweeping-writeup/Tue, 06 Aug 2019 17:00:00 GMThttps://cristi075.github.io/posts/de1ctf-2019-ssrf-me-writeup/https://cristi075.github.io/posts/de1ctf-2019-ssrf-me-writeup/This is my writeup for the SSRF Me challenge. This challenge was part of De1CTF 2019. We only got an URL that we should access as part of the challenge. Accessing that URL returns some python code.Tue, 06 Aug 2019 15:00:00 GMT