CTF writeups

A Capture the Flag (CTF) is a legal, sanctioned competition where players solve security challenges to recover hidden tokens called flags. Everything runs against infrastructure the organizers set up for exactly that purpose, so it is a safe way to practice offensive techniques without touching real systems.

These writeups follow a red-team learning approach: enumerate, form a hypothesis, test it, and document what worked and what did not. They describe only authorized practice. There are no live flags, no unauthorized targets, and no guidance for acting against systems you do not own or have explicit permission to test. Where an offensive finding has a clear defensive lesson, the writeup calls it out.