Blog
How to get the full domain allowlist for pulling Docker images
Use crane logs to build a minimal proxy allowlist for Docker image pulls.
December 20, 2025
F5 BIG-IP iControl REST vulnerability CVE-2022-1388
Discovered F5 BIG-IP iControl REST vulnerability CVE-2022-1388 before it was published.
May 9, 2022
racecar
Solving the HackTheBox racecar pwn challenge by leaking the flag off the stack with a format string bug.
May 2, 2022
ret2win
Solving ROP Emporium's first challenge, ret2win (x86), by overflowing a stack buffer and returning into the ret2win function with pwntools.
January 3, 2021
Reversing ELF
A beginner-friendly walkthrough of all eight TryHackMe Reversing ELF crackmes, from plain strings to gdb, LD_PRELOAD and radare2.
December 7, 2020
Inclusion
TryHackMe Inclusion walkthrough: a Local File Inclusion leaks a password from /etc/passwd, and a sudo socat rule hands over a root shell.
March 16, 2020
Blue
Walking through the TryHackMe Blue room: exploiting MS17-010 (EternalBlue) with Metasploit, upgrading to Meterpreter, dumping and cracking hashes, and collecting all three flags.
February 12, 2020
Bookface
TryHackMe Bookface walkthrough: brute-forcing FTP with hydra, finding a port-knock sequence in DNS, and rooting the box through a SUID screen 4.05.0.
February 10, 2020
Daily Bugle
TryHackMe Daily Bugle walkthrough: Joomla 3.7.0 SQL injection, cracking a bcrypt hash, template RCE, a reused database password and root via sudo yum.
February 6, 2020
Impossible Password
HackTheBox Impossible Password: using radare2 to find the hardcoded first key in an x86_64 Linux crackme.
January 27, 2020