Write-up of PDF-Mess from HeroCTF v5, an introduction to object-based PDF steganography: digging through the PDF object tree to recover data hidden inside the document structure.
Write-up of Didactic Octo Paddles, a medium web challenge from HackTheBox Apocalypse 2023 exploiting a JWT authentication bypass chained with server-side template injection (SSTI).
Write-up of Orbital, an easy web challenge from HackTheBox Apocalypse 2023, walking through the recon and exploitation steps used to capture the flag.
Write-up of ItAlsoExistsOnAudioFiles, an audio steganography challenge I created for HeroCTF v4, decoding a flag hidden in the samples of a WAV file with Python.
Write-up of Space, a steganography challenge from CTF InterIUT 2020, reconstructing and decoding a Data Matrix / QR code to recover the hidden flag.
