DEV Community

#ctf

Capture The Flag competitions, challenges, writeups, and strategies.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
This Box's Admin Was Live, Online, and Actively Trying to Kick Me Out — Red (TryHackMe)

This Box's Admin Was Live, Online, and Actively Trying to Kick Me Out — Red (TryHackMe)

Comments
9 min read
I Owned This Box Before Scanning a Single Port — Fowsniff CTF (TryHackMe)

I Owned This Box Before Scanning a Single Port — Fowsniff CTF (TryHackMe)

Comments
7 min read
The App Blocked Every rockyou.txt Password — So I Built My Own Wordlist From Its Homepage — Silver Platter (TryHackMe)

The App Blocked Every rockyou.txt Password — So I Built My Own Wordlist From Its Homepage — Silver Platter (TryHackMe)

Comments
5 min read
A File Upload Filter That Had Never Heard of .phtml — RootMe (TryHackMe)

A File Upload Filter That Had Never Heard of .phtml — RootMe (TryHackMe)

Comments
4 min read
An AppArmor Profile Forgot About Perl — Publisher (TryHackMe)

An AppArmor Profile Forgot About Perl — Publisher (TryHackMe)

Comments
5 min read
Changing One Word in the URL Logged Me In As Admin — Neighbour (TryHackMe)

Changing One Word in the URL Logged Me In As Admin — Neighbour (TryHackMe)

Comments
4 min read
Someone Corrupted a PNG on Purpose — I Had to Fix It to Get the Password — Lian Yu (TryHackMe)

Someone Corrupted a PNG on Purpose — I Had to Fix It to Get the Password — Lian Yu (TryHackMe)

Comments
6 min read
The Password Was the Entire Contents of robots.txt — Pickle Rick (TryHackMe)

The Password Was the Entire Contents of robots.txt — Pickle Rick (TryHackMe)

Comments
4 min read
The Login Check Only Lived in the Browser — I Just Skipped It — Overpass (TryHackMe)

The Login Check Only Lived in the Browser — I Just Skipped It — Overpass (TryHackMe)

Comments
5 min read
An 858,160-Word Wordlist Had Only 11,451 Unique Words In It — Mr Robot CTF (TryHackMe)

An 858,160-Word Wordlist Had Only 11,451 Unique Words In It — Mr Robot CTF (TryHackMe)

Comments
5 min read
I Used an XML Parser to Steal an SSH Private Key — Mustacchio (TryHackMe)

I Used an XML Parser to Steal an SSH Private Key — Mustacchio (TryHackMe)

Comments
6 min read
This Box's Shoutbox Narrated Its Own Hack — Cyborg (TryHackMe)

This Box's Shoutbox Narrated Its Own Hack — Cyborg (TryHackMe)

Comments
6 min read
This Box's Homepage Named Its Own CVE — Ignite (TryHackMe)

This Box's Homepage Named Its Own CVE — Ignite (TryHackMe)

Comments
5 min read
This Box Basically Wrote My Hydra Command for Me — Bounty Hacker (TryHackMe)

This Box Basically Wrote My Hydra Command for Me — Bounty Hacker (TryHackMe)

Comments
4 min read
A Writable Docker Socket Is Just Root With Extra Steps — Chill Hack (TryHackMe)

A Writable Docker Socket Is Just Root With Extra Steps — Chill Hack (TryHackMe)

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.