Insights from
the workshop
Articles on web development, Laravel, Vue.js, SEO and the technologies we work with every day.
TryHackMe: Pickle Rick CTF Walkthrough
Follow this step-by-step walkthrough of the TryHackMe Pickle Rick CTF. Learn how to discover the credentials, bypass the command blacklist, obtain a reverse shell, find all three ingredients, and escalate privileges to root.
Read more →
Hacker Holidays: Beach Bar | TryHackMe Room Write-up
A detailed walkthrough of the "Hacker Holidays: Beach Bar" CTF machine from TryHackMe. This guide demonstrates how to pivot from exposed developer credentials in source code to Remote Code Execution via unsafe Python YAML loading, concluding with privilege escalation through credential leakage in process arguments.
Read more →
TryHackMe CTF Write-up: LLMborghini
A quick TryHackMe write-up for the LLMborghini room, focused on exploiting CalBot — an internal LLM calendar assistant with access to confidential financial data. In this post, I demonstrate how system prompt leakage and prompt injection techniques can be used to bypass instruction-based restrictions and reveal the Singapore branch’s weekly revenue.
Read more →
Marik CTF – TryHackMe Write-up
Marik CTF is a beginner-friendly boot-to-root challenge that focuses on source code exposure, weak credential hashing, and simple file upload bypasses. In this walkthrough, I’ll walk you through every step from initial reconnaissance to capturing the root flag.
Read more →
All in One – TryHackMe Write-up
Stuck on the All in One machine? Check out this complete guide! We start with a standard Nmap scan, pivot from a WordPress LFI vulnerability into a full RCE using a PHP Filter Chain, and finally hijack a root cron job to capture both flags. A perfect practice for web exploitation and Linux enumeration.
Read more →