ctf
Writeups & challenge notes.
Selected solves across HTB, THM, and original challenges — focused on methodology over flag-chasing.

HTBHard9 min
HTB · Cerberus — Three-Headed Privilege Escalation
Chaining an SSRF in a SAML responder with a misconfigured ADCS template for domain admin.
#htb#ad#saml#adcs

THMMedium7 min
THM · Glyph — Reversing a Custom VM
Recovering the bytecode dispatcher of a hand-rolled stack VM and decrypting the flag with a 40-line Python lifter.
#thm#re#vm