CTF & Box Writeups

Approach

Each writeup follows the same arc: enumeration, the foothold, privilege escalation, and a short "what I'd do differently" reflection. I focus on the reasoning — why I chased a given lead — rather than just pasting commands, because that's the part that actually demonstrates methodology.

Writeups

• Box Name — short hook Easy
  SQLi foothold → credential reuse → sudo misconfiguration to root. Replace this with a real one.
• Box Name — short hook Medium
  SSRF to internal service, then a deserialization bug for RCE. Replace this with a real one.
• Box Name — short hook Hard
  AD enumeration, Kerberoasting, and abusing a delegation path to DA. Replace this with a real one.

How it maps to security work

This is the closest thing to the day-to-day of a penetration tester: structured enumeration, chaining vulnerabilities into a foothold, escalating privilege, and — crucially — writing it up clearly. The reporting matters as much as the exploitation in real engagements.