Search for a command to run...
Series
Complete FAM CTF writeups featuring web, cloud, cryptography, reverse engineering, OSINT, forensics, binary exploitation, and miscellaneous challenges with detailed step-by-step solutions.
Summary The target exposed a webhook endpoint (/internal/webhook) meant to act as an internal-only proxy, blocking direct requests to private and link-local IP ranges. That blocklist checked resolved
Executive Summary FAM is a mobile CTF challenge distributed as an Android APK (fam-ctf.apk) with four staged flags, each themed around a different layer of the app's Firebase backend: The Library (nat
Summary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts
