SKIP TO MAIN CONTENT

[ EST. 2024 / INTERNATIONAL ]

SECURITY RESEARCH COLLECTIVE

SECURITY RESEARCH KNOWLEDGE TECHNIQUES

Writeups

Writeups from competitions we have participated in, grouped by event, written by the members who competed.

BYUCTF 20268 WRITEUPS
[ BYUCTF 2026 ]Misc

BYUCTF 2026 PICKLE RICK MISC

Analysis of the PICKLE RICK challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Cryptography

BYUCTF 2026 RSA DREAMS

Analysis of the RSA DREAMS challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Cryptography

BYUCTF 2026 CUSTOM CIPHER

Analysis of the CUSTOM CIPHER challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Forensics

BYUCTF 2026 GLADOS NETWORK

Analysis of the GLADOS NETWORK challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Steganography

BYUCTF 2026 CHROMATIC

Analysis of the CHROMATIC challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Web

BYUCTF 2026 MY-CAT

Analysis of the MY-CAT challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Reverse Engineering

BYUCTF 2026 -RCAAS

Analysis of the RCAAS challenge and how it was approached and solved.

BY@sapien
READ →
[ BYUCTF 2026 ]Pwn

BYUCTF PWN INCONTINENT

Analysis of the INCONTINENT challenge and how it was approached and solved.

BY@sapien
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Velvet Rehearsal

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Touchline Dispatch

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Through The Cracks

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Secret Vault

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Second Look

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Quick Recovery

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Midnight Feedback

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Lightweight Directory

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

JWT Forgery

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Inside Job

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

HEAD Office

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Ginger Juice Shop

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Citrus Proof

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Blank Space

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Between Us

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

At The Limit

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Web

Archived

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Mobile

SecureVault

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Forensics

Second Pressing

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Forensics

Matchday Replay

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Safaricom PwnZone 2.0 Qualifiers 2026 ]Cryptography

Midnight Parcel

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Insecure Deserialization

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Ssti Template Eval

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Graphql Schema Leak

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Cors Credential Leak

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Prototype Pollution

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Xxe External Entity

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Ssrf Metadata Proxy

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Jwt None Algorithm

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Path Traversal

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Sql Auth Bypass

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Git Metadata Leak

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Hidden Form Input

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Robots Txt

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Cookie Tamper

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Header Sleuth

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Web

Saml Signature Wrap

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Ptrace Antidebug

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Gdb Rax Inspection

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Instruction Patching

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Java Class Cfr

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Pyc Decompilation

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Upx Decompression

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Ltrace Intercept

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Strings Grep

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Arm64 Baremetal

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Reverse Engineering

Wasm Decompilation

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Tcache Poisoning

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Heap Use After Free

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Integer Wrap

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Format String Leak

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Shellcode Rwx

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Stack Var Overwrite

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Ret2Win Overwrite

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Pwn

Srop Registers

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Kerberos Tgs Dump

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Browser Sqlite History

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Ntfs Mft Parsing

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Icmp Tunnel Exfil

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Zip Known Plaintext

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Steghide Audio

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Png Magic Bytes

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Exif Metadata

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Pcap Cleartext

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Aes Memory Keyschedule

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Ext4 Inode Carving

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Forensics

Usb Hid Keystrokes

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Lcg Predict

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Diffie Hellman G1

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Vigenere Cipher

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Rot13 Classic

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Ecdsa Nonce Reuse

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cryptography

Bleichenbacher Oracle

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Shodan Unauth Mqtt

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Asn Bgp Prefix

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Ec2 Imds V1

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Github Commit Keys

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Osint Geolocation

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Dns Historic Records

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

K8S Service Account

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Docker Socket Mount

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Iam Privilege Escalate

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

S3 Open Bucket

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Satellite Sar Analysis

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

Cloudtrail Regional

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Cyberweek Africa Qualifiers 2026 ]Cloud

K8S Rbac Exec

Analysis of the challenge and how it was approached and solved.

BY@bealthguy
READ →
07CTF 20261 WRITEUPS
[ 07CTF 2026 ]Cryptography

Herbarium Writeup

Analysis of the Herbarium challenge and how it was approached and solved.

BY@bealthguy
READ →
gaslightCTF 202620 WRITEUPS
[ gaslightCTF 2026 ]Pwn

GasLightCTF 2026 - Ucas Writeup

Analysis of the Ucas challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Pwn

GasLightCTF 2026 - Good Enough Writeup

Analysis of the Good Enough challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Forensics

GasLightCTF 2026 - Icon Sketch Writeup

Analysis of the Icon Sketch challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Forensics

GasLightCTF 2026 - Blackout Writeup

Analysis of the Blackout challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Web

GasLightCTF 2026 - Corridors Writeup

Analysis of the Corridors challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GasLightCTF 2026 - Down The Stream 2

Analysis of the Down The Stream 2 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GasLightCTF 2026 - Down The Stream 1

Analysis of the Down The Stream 1 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GasLightCTF 2026 - Where the dream starts 3

Analysis of the Where the dream starts 3 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Misc

GasLightCTF 2026 - Jsbox Writeup

Analysis of the Jsbox challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Web

GasLightCTF 2026 - Json-Warehouse Writeup

Analysis of the Json-Warehouse challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Web

GasLightCTF 2026 - Messageboard Writeup

Analysis of the Messageboard challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Web

GasLightCTF 2026 - Biscuit Writeup

Analysis of the Biscuit challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Pwn

GaslightCTF 2026 - Badcat Writeup

Analysis of the Badcat challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Pwn

GaslightCTF 2026 - Ram Conservation Writeup

Analysis of the Ram Conservation challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GaslightCTF 2026 - CompleteHTTP Writeup

Analysis of the CompleteHTTP challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Reverse Engineering

GaslightCTF 2026 - Compiled Source Sheets Writeup

Analysis of the Compiled Source Sheets challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GaslightCTF 2026 - Where the dreams start 2

Analysis of the Where the dreams start 2 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GaslightCTF 2026 - Where the dreams start 1

Analysis of the Where the dreams start 1 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GaslightCTF 2026 - NewJeans Is Five Writeup

Analysis of the NewJeans Is Five challenge and how it was approached and solved.

BY@bealthguy
READ →
[ gaslightCTF 2026 ]Cryptography

GaslightCTF 2026 - Affine Hill Writeup

Analysis of the Affine Hill challenge and how it was approached and solved.

BY@bealthguy
READ →
[ CyberGames Kenya 2026 ]Reverse Engineering

Cybergames Kenya 2026 - Intergalactic Beaconv0

Analysis of the Intergalactic Beaconv0 challenge and how it was approached and solved.

BY@bealthguy
READ →
[ CyberGames Kenya 2026 ]Web

Cybergames Kenya 2026 - Flappy Writeup

Analysis of the Flappy challenge and how it was approached and solved.

BY@bealthguy
READ →
[ CyberGames Kenya 2026 ]Pwn

Cybergames Kenya 2026 - Tower of Hanoi: Revenge

Analysis of the Tower of Hanoi: Revenge challenge and how it was approached and solved.

BY@bealthguy
READ →

Independent

8 WRITEUPS
[ Independent ]Cryptography

BYUCTF2026 COPPERSMITH

Analysis of the COPPERSMITH challenge and how it was approached and solved.

BY@sapien
READ →
[ Independent ]Reverse Engineering

THE DOJO AH & PERFECTROOT

Analysis of the Ouroboros challenge and how it was approached and solved.

BY@sapien
READ →
[ Independent ]Cryptography

AFRICC Qualifiers 2027 - Twin Spirit Channels Writeup

Analysis of the Twin Spirit Channels challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Independent ]Reverse Engineering

AFRICC Qualifiers 2027 - Fortress Writeup

Analysis of the Fortress challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Independent ]Reverse Engineering

AFRICC Qualifiers 2027 - D3lulu Writeup

Analysis of the D3lulu challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Independent ]Reverse Engineering

AFRICC Qualifiers 2027 - Deja VM writeup

Analysis of the Deja VM challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Independent ]Web

AFRICC Qualifiers 2027 - Deputy Ledger Writeup

Analysis of the Deputy Ledger challenge and how it was approached and solved.

BY@bealthguy
READ →
[ Independent ]Web

AFRICC Qualifiers 2027 - Confused Deputy Writeup

Analysis of the Confused Deputy challenge and how it was approached and solved.

BY@bealthguy
READ →