notes, experiments & the occasional rabbit hole
I'm a BCA student passionate about cybersecurity, Linux, and web application security.
This is where I document what I learn while solving Hack The Box and TryHackMe machines, competing in CTFs, experimenting with web technologies, and building practical projects — mostly on the backend side of things.
Now question is why backend ?
Well, everyone's a developer until a script kiddie gets a remote shell on their machine. So instead of chasing pixel-perfect UIs, I focus on secure development — rate limiting, manual auth systems, business logic, secure file upload systems — because design really isn't my thing.
thanks for visiting!
Hack The Box DoubleTake walkthrough: OpenSSH 10.6 authentication bypass (CVE-2026-123158) on Alpine, Firefox credential extraction and a Docker 29.5.0 archive upload container escape to root.
HackSmarter SysAdmins CTF writeup: enumerate SNMPv3, recover SSH credentials, and exploit a vulnerable sudo version to gain root access.
Hack The Box Takeoff is an active Linux machine featuring Go SSTI in an airline ticket workflow, an n8n API attack surface, and container mount misconfiguration. This protected writeup page introduces its topics without publishing the solution.
CTF Try Out walkthrough covering XML external entity (XXE) file disclosure in JailBreak, command injection in Time KORP, and a Flask Jinja2 server-side template injection (SSTI) path in Guild Master. Includes screenshots and key discovery steps.
Hack The Box Stream walkthrough covering an exposed Java heap dump, ClickHouse and Kafka enumeration, XXE file disclosure, and a root-run data pipeline task.
HackSmarter TaskFlow CTF writeup: escape Node.js vm through host objects, recover Gitea credentials, abuse Actions for a shell, then use Docker to read root.
Hack The Box Layover overview: RDP entry, Wireshark credential sniffing, Craft CMS RCE (CVE-2026-44011), security-key decryption and CUPS privesc.
Hack The Box Connected machine overview: FreePBX unauthenticated SQLi, a firmware-upload webshell RCE and an incron privesc. Full steps after retirement.
A responsible disclosure write-up covering broken access control and data exposure in a cybersecurity training academy GraphQL API.