This repository contains my write-ups from various Capture The Flag (CTF) challenges.
It serves as a record of my hands-on learning in cybersecurity, focusing on problem-solving, analysis, and practical techniques used in real-world scenarios.
My team Ctrl_Alt_Defeat took first place in the cybersecurity Capture The Flag track at the 2026 Bloomberg × The Knowledge House Hackathon — a 27-level challenge built by Bloomberg's Product Security team, completed in full including the hidden secret level.
The challenge spanned the full web-exploitation spectrum: information disclosure, broken authentication, JWT forgery, SQL & command injection, prompt injection, path traversal, open redirects, client-side crypto, reverse engineering, business-logic abuse, and multi-step exploit chaining.
📁 Write-up: ➡️ Bloomberg-TKH-CTF-2026/
ℹ️ Level-specific flags, passwords, and paths are intentionally redacted — this is an active CTF that the organizers reuse.
- Web exploitation — SQL injection, command injection, open redirect, path traversal, forced browsing
- Authentication & session attacks — JWT tampering, cookie forgery, default credentials
- Client-side analysis — DevTools, JavaScript deobfuscation, Base64 & crypto inspection
- Reverse engineering & static analysis —
strings, ELF binaries, obfuscated JS - Prompt injection against LLM-backed features
- Network fundamentals — subnetting, port-scan analysis
- Linux command line, Git, and version control analysis
- Problem-solving and analytical thinking
- Completed all 27 levels (−1 → 25), including the hidden secret level
- Full-spectrum web exploitation, authentication bypass, and exploit chaining
- 📁 Write-up: ➡️
Bloomberg-TKH-CTF-2026/
- Solo solve of a beginner-friendly, browser-based CTF investigating a fictional ransomware leak site
- Chained API enumeration, leaked credentials, and chat-log OSINT to recover the flag
- 📁 Write-up: ➡️
Flare-WiCyS-CTF-2026/
- Completed beginner challenges focused on Linux and Git fundamentals
- Practiced privilege escalation and repository manipulation techniques
- 📁 Write-up: ➡️
picoCTF-2026/
- AI/LLM security challenge series (add a one-line summary of what you covered)
- 📁 Write-up: ➡️
TryHackMe-AIOdyssey/
- Continue solving CTF challenges across multiple platforms
- Improve skills in web exploitation, forensics, and reverse engineering
- Document progress and build a strong cybersecurity portfolio
- DevSecCon25 Challenge (Top 5 Finish) — https://github.com/chris12x1/devseccon25-proof