~*~ blog ~*~
- 2026-07-09 cctf.rs — I rebuilt CTFd from scratch in Rust
Why I wrote my own CTF platform from zero in Rust. Hand-rolled SMTP and JWT, sandboxed rhai scripting in every corner, per-team Kubernetes instancing, SSE notifications, and a fully headless API. A build log. - 2026-07-05 Crypto: Baby ZKP
A Schnorr proof whose response is reduced mod the wrong prime. Two stages, two RNGs — a truncated LCG cracked with a lattice, and MT19937 rebuilt from GF(2) relations on the leaked responses. - 2026-07-05 Misc: TEAGod Staff WiFi
An enterprise WiFi RADIUS server that trusts a public CA for client auth. Grab a free Actalis S/MIME cert, present it as your EAP-TLS client cert, and you're staff. - 2026-06-29 Crypto: Needle in a Multivariate
A multivariate-quadratic signature with no norm check. The 200 published signatures leak the hidden basis — BKZ it back, read off the secret p·I/q·I blocks, and forge with four squares. - 2026-05-31 OSINT: oshit
smartfella ctf fr. the best osint chain i've ever seen, a 20-hop rabbit hole. - 2026-05-09 From Dusk Till Dawn 2026 Quals
16 solves, 6 writeups. we went hard on this one. italian CTF with rome finals for top 5. - 2026-05-02 Reversing KryptonPlus: Tearing Apart a Minecraft Rat
Full static analysis of a JNI-obfuscated Minecraft cheat client with a bundled RAT — custom Zig AOT compiler, IEEE 754 string encryption, and goto-spaghetti bytecode decryption. - 2026-03-26 Crypto: White Rabbit
Known-plaintext XOR crib attack on a fake PDF to recover a 16-byte repeating key. - 2026-03-26 Web: BrandKit Studio
Double extension upload bypass on nginx + PHP-FPM to get arbitrary file read. - 2026-03-26 How We Built a Self-Hosted CTF Platform (From Scratch-ish)
Custom CTFd deployment with Cloudflare Tunnel, per-player instancing, WebSocket bridge for nc challenges, and a theme that actually looks good. - 2026-03-22 Web: Paper 2
CSS attribute selectors meet Redis LRU eviction in a 500-point side-channel challenge. - 2026-01-16 random osu! adjacent shitpost
its a shitpost dont expect effort here - 2026-01-13 The Most Demented Python Line I Have Ever Written (Probably)
Lambdas lambda'ing all over control codes. Don't you love it? - 2026-01-06 Why C++ Will Never Die (and why it shouldn't!)
It's not because it's such a perfect language... - 2026-01-05 Building a Serverless, Dynamic Blog with Pure HTML and JS
How I built a (somewhat) secure markdown-based blog engine that compiles at runtime using vanilla JS and Firebase, completely skipping modern build steps or server infrastructure.