CTF write-ups

Hack The Box, Proving Grounds, TryHackMe, and other CTF-style walkthroughs.

• 

  PG • CTF • Jacko • Write-Up

  Published:Jan 22, 2026 |  at 12:46 PM

  Proving Grounds CTF - Jacko. H2 database misconfiguration, RCE, and DLL hijacking in PaperStream IP.

• 

  PG • CTF • Internal • Write-Up

  Published:Jan 22, 2026 |  at 12:45 PM

  Proving Grounds Internal write-up: very old Windows Server 2008 box where we find SMBv2 CVE-2009-3103 with nmap and use Metasploit to pop a SYSTEM meterpreter.

• 

  PG • CTF • DVR4 • Write-Up

  Published:Jan 22, 2026 |  at 12:44 PM

  Proving Grounds DVR4 write-up: use Argus DVR path traversal to steal SSH keys and flags, then break its weak password encryption to log in as Administrator on the host.

• 

  PG • CTF • Authby • Write-Up

  Published:Jan 22, 2026 |  at 12:43 PM

  Proving Grounds CTF - Authby. Anonymous FTP, credential deduction, and MS11-046 privilege escalation.