Recent Posts
Intigriti | Challenge 0926 Writeup
Intigriti’s September challenge was a challenge I had fun solving, leveraging a simple, yet, the kind of SQL Injection (SQLI) that a bug hunter looks forward to unveil in real scenarios. This writeup encompasses a step-by-step approach to perform SQLI manually going from recon to capturing the flag.
Sep 23, 2026 | #SQLI
Intigriti | SantaCloud Challenge Writeup
During the holidays, just when I thought the Xmas CTFs were over, I received a Discord notification about a special Intigriti holiday challenge. With one more to go, that, kids, is how a cozy day quietly turns into a cozy day sprinkled with flags. SantaCloud was a cool and simple challenge where recon was the key.
Dec 29, 2025 | #IDOR
Root-Xmas 2025 | Writeup Selection
Once more, Root-Xmas CTF was back this year, and once more, it was the highlight of the month 🎀 This blog post details three of my challenges’ solutions for the Days 8, 11 and 18, including a Bash jail, a Ruby web app and an awk privesc.
