CTF writeup archive
A structured archive of Capture the Flag methodology: sanitized writeups covering enumeration, failed attempts, tools used, and defensive takeaways.
The CTF writeups section: a growing, structured archive of Capture the Flag methodology. The point is not the flags, it is the reasoning, so each writeup follows the same outline and keeps the dead ends in.
Approach
- Red-team learning methodology. Enumerate, form a hypothesis, test it, and record what worked and what did not.
- Consistent structure. Challenge, event, category, difficulty, goal, initial observations, enumeration, failed attempts, breakthrough, solution summary, takeaway, tools used, and lessons learned.
- Offense-first takeaways. Each writeup closes with the technique, why the exploit worked, and what carries over to real engagements.
Boundaries
- Legal, authorized practice only: everything targets CTF infrastructure or systems I own.
- No live flags and no fabricated placements. Results are only stated where they are verifiable.
- No guidance for acting against systems without authorization.
Status
In progress. Published so far: the full RowdyHacks XII board (28 writeups, every challenge), BroncoCTF 2026, and UIUCTF 2026. Writeups from other events are sanitized and published as they are finished.