06 — Writeups

Notes from the field

CTF writeups, HackTheBox walkthroughs and security research notes — the full chain, dead ends included.

CTF 2026-07-12

Fampay FAM CTF — Full Writeup (All 6 Challenges)

Mobile / web / cloud CTF chain — from reversing an Android APK and Firebase abuse to native binary RE, JWT forgery, and an SSRF → IMDS → S3 privilege escalation on a live EC2 instance.

  • Android
  • Firebase
  • AWS
  • SSRF
  • Reversing
Read

Nothing here yet

Stay tuned for HTB walkthroughs, CTF writeups and blog posts.