CTF Writeups

A collection of my Capture The Flag (CTF) writeups. Each competition gets its own subfolder with writeups and supporting images.

This lives inside my Obsidian vault, so writeups use Obsidian-style links between notes.

Competitions

CyLab-PicoCTF

• Old Sessions — Web Exploitation, Easy (picoCTF 2026)
• Crack the Gate 1 — Web Exploitation, Easy (picoMini by CMU-Africa)
• SSTI1 — Web Exploitation, Easy (picoCTF 2025)
• n0s4n1ty 1 — Web Exploitation, Easy (picoCTF 2025)
• Binary Digits — Forensics, Easy (picoCTF 2026)
• Cookie Monster Secret Recipe — Web Exploitation, Easy (picoCTF 2025)
• Inspect HTML — Web Exploitation, Easy (picoCTF 2022)
• head-dump — Web Exploitation, Easy (picoCTF 2025)
• WebDecode: Web Exploitation, Easy (picoCTF 2024)
• Unminify: Web Exploitation, Easy (picoCTF 2024)
• dont-use-client-side: Web Exploitation, Easy (picoCTF 2019)
• Cookies: Web Exploitation, Easy (picoCTF 2021)
• Local Authority: Web Exploitation, Easy (picoCTF 2022)
• Bookmarklet: Web Exploitation, Easy (picoCTF 2024)
• Includes: Web Exploitation, Easy (picoCTF 2022)
• Where Are the Robots: Web Exploitation, Easy (picoCTF 2019)
• GET aHEAD: Web Exploitation, Easy (picoCTF 2021)
• StegoRSA: Cryptography, Easy (picoCTF 2026)