Various CTF (capture the flag) security challenges that I've created
| Name | CTF | Category | Year | Writeup |
|---|---|---|---|---|
| safestnote | DiceCTF 2025 Quals | client-side webChromium formfill state hijacking + bfcache + CSS exfiltration |
2025 | Writeup |
| uploaders-revenge | CSAW CTF 2023 Finals | client-side webFirefox CSP bypass via controlled mimetype |
2023 | TODO |
| webhooktester | CSAW CTF 2023 Finals | server-side webSSRF filter bypassing + Caddy SSRF -> RCE |
2023 | TODO |
| rainbow-notes | CSAW CTF 2023 | client-side webDOM clobbering + STTF XS-leak |
2023 | Writeup |
| pwnykey | UIUCTF 2023 | reversingreversing custom obfuscation of DeviceScript bytecode |
2023 | Writeup |
| geminiblog | DiceCTF 2023 | networking/miscbash bugs + SNI injection |
2023 | My Writeup |
| impossible-xss | DiceCTF 2023 | client-side webXXE in Chrome XSLT |
2023 | My Writeup |
| jnotes | DiceCTF 2023 | server-side webcookie smuggling / Jetty 0day |
2023 | Writeup, My Writeup |
| spoink | UIUCTF 2022 | server-side webPebble Spring SSTI 0day |
2022 | Writeup (CN), Writeup (JP) |
| woeby | UIUCTF 2022 | server-side webCSRF+SQLi in OSS search engine |
2022 | Writeup (CN) |
| precisionism | UIUCTF 2022 | client-side webharder prefix injection to bypass CORB |
2022 | Writeup |
| modernism | UIUCTF 2022 | client-side webprefix injection to bypass CORB |
2022 | Writeup (CN) |
| shadow | DiceCTF 2022 | client-side webexfiltration from shadow DOM |
2022 | Writeup |
| uploader | N/A | client-side webfileupload XSS bypassing CSP and mimetype filter |
2021 | TODO |
| pwnyIDE | UIUCTF 2021 | client-side webchrome 0day (header length bypass) + cross protocol scripting + 2 node-ftpd 0days (race condition, multiple command smuggling) |
2021 | Writeup |
| yana | UIUCTF 2021 | client-side webcache probing xs-leak + cache partitioning bypass |
2021 | Writeup |
| essveegee | UIUCTF 2021 | client-side webSVG LFI + file:// directory brute forcing without JS |
2021 | Writeup (JP) |
| phpfuck | UIUCTF 2021 | php jailPHP RCE in 5 unique chars |
2021 | Writeup |
| deserializeme | UIUCTF 2020 | deserialization/miscPyYAML 0day |
2020 | Writeup |
| nookcrypt | UIUCTF 2020 | cryptoECC fault attack |
2020 | Writeup |
| fumblr | EasyCTF IV | client-side webCSRF + CSP bypass |
2018 | Writeup |
| Fanfic Studio | EasyCTF IV | heap pwnintro heap exploitation |
2018 | Writeup |
| qset 1,2,3 | ABCTF 2017 | esolang ppcwrite code in an esolang i made |
2017 | Writeup |
| library | EasyCTF 2017 | combinatorics ppccombinatorics fun |
2017 | Writeup (CN) |
| Little Crypto Gambler | ctf(x) | lcg cryptocrack generated LCGs |
2016 | Writeup |
| customauth | ctf(x) | crypto/webECB ciphertext manipulation |
2016 | Writeup |