The Open Archive for CTF Walkthroughs

Read, search, and dissect real-world capture-the-flag solutions, zero-day research, and offensive engineering writeups.

Verified Solutions2 Indexed

All Categories Web Pwn Crypto Reverse Forensics Misc OSINT

Diff:Easy Med Hard Insane

Sort:

Trending Latest Views

WEBmedium

Google CTF '24

Bypassing WAF & Next.js SSR Cache Poisoning with Custom Deserialization

Reverse proxy header uncloaking combined with Next.js ISR (Incremental Static Regeneration) key poisoning to execute stored XSS on administrative dashboards.

@cyber_ghost

5.1k6m

REVERSEmedium

HackTheBox CyberApocalypse '24

Unpacking Obfuscated Android ELF Native Libraries with Frida and Unicorn

Dumping dynamically decrypted OLLVM functions from .so memory using Frida hook on JNI_OnLoad and resolving control flow flattening with symbolic execution.

@bin_wizard

2.9k7m