Popular repositories Loading

1. secure-email-service secure-email-service Public

   A simulated secure email service using S/MIME for signing emails. The goal is to steal the admin's browser local storage flag by exploiting flaws in email parsing and rendering.

2. Bithug Bithug Public

   This is a difficult web exploitation task. To solve it, I must exploit a Server-Side Request Forgery (SSRF) vulnerability in Git webhooks and use template injection. This allowed me to gain admin p…

3. WebNet1 WebNet1 Public

   This network forensics challenge involves analyzing a PCAP file. I use the provided RSA private key with Wireshark and ssldump to decrypt TLS-encrypted web traffic and uncover a hidden flag. Proves…

4. Surfing-the-Waves Surfing-the-Waves Public

   This challenge involves analyzing a WAV audio file for hidden data (steganography). The file contains encoded hexadecimal data embedded in the audio samples.

5. Noted-challenge Noted-challenge Public

   This challenge is a hard web exploitation task involving self-XSS, Puppeteer automation in a headless browser, and data exfiltration. The goal is to steal the flag from a note created by a bot.

6. CCT2019-U.S.-Navy-Cyber-Competition-Assessment CCT2019-U.S.-Navy-Cyber-Competition-Assessment Public

   This challenge focusing on network forensics and packet analysis using Wireshark. I must analyze PCAP files, images, and other data to find flags and progress through the challenge.