Posts
All the things I've posted.

PG • CTF • DVR4 • Write-Up
Published: at 12:36 PMProving Grounds DVR4 write-up: use Argus DVR path traversal to steal SSH keys and flags, then break its weak password encryption to log in as Administrator on the host.

PG • CTF • Jacko • Write-Up
Published: at 12:36 PMProving Grounds CTF - Jacko. H2 database misconfiguration, RCE, and DLL hijacking in PaperStream IP.

PG • CTF • Nagoya • Write-Up
Published: at 12:36 PMProving Grounds CTF - Nagoya. SMB enumeration, Kerberoasting, MSSQL enumeration, Silver Ticket, and token abuse.

Access Kubernetes NodePort Services with Subdomains
Published: at 07:50 AMExpose Kubernetes NodePort services via subdomains using wildcard DNS and NGINX, without an Ingress controller.