Hack The Box/SilentiumSilentium — Hack The BoxA quiet Linux host still exposes a few interesting HTTP routes and a forgotten dev vhost.Misceasy#linux#easy#hacktheboxApr 11, 2026
NCTF 2026/Crypto 101·100ptsCrypto 101 — NCTF 2026Beginner crypto — community writeups on CTFtime.CryptoeasyCTFtime#crypto#2026#nctf-2026Apr 5, 2026
NCTF 2026/Hello World·50ptsHello World — NCTF 2026Sanity check from NCTF 2026.MisceasyCTFtime#misc#2026#nctf-2026Apr 5, 2026
Hack The Box/GarfieldGarfield — Hack The BoxFootprint suggests a Windows app stack with legacy auth still enabled.Mischard#windows#hard#hacktheboxApr 4, 2026
Hack The Box/DevAreaDevArea — Hack The BoxDevelopers left a CI artifact and a sandbox API online longer than they should have.Miscmedium#linux#medium#hacktheboxMar 28, 2026
Hack The Box/KoboldKobold — Hack The BoxLight recon finds a small Flask surface and a curious static mount.Misceasy#linux#easy#hacktheboxMar 21, 2026
Hack The Box/VariaTypeVariaType — Hack The BoxTypography puns aside, the attack surface is a font preview service and an admin queue.Miscmedium#linux#medium#hacktheboxMar 14, 2026
Hack The Box/CCTVCCTV — Hack The BoxA surveillance-themed host exposes a stream dashboard and a brittle onboarding flow.Misceasy#linux#easy#hacktheboxMar 7, 2026
Hack The Box/PiratePirate — Hack The BoxMaritime branding hides a fairly classic Windows foothold: IIS, an upload nook, and a secondary listener on a high port.Mischard#windows#hard#hacktheboxFeb 28, 2026
DiceCTF 2026 Quals/survey·1ptssurvey — DiceCTF 2026 QualsFeedback / survey flag from DiceCTF 2026 Quals.MisceasyBlog#misc#dicectf#dicectf-quals-2026Feb 22, 2026
DiceCTF 2026 Quals/welcome·1ptswelcome — DiceCTF 2026 QualsEntry challenge — check DiceGang GitHub for the 2026 archive.MisceasyGitHub#misc#dicectf#dicectf-quals-2026Feb 22, 2026
Hack The Box/InterpreterInterpreter — Hack The BoxAn embedded scripting endpoint and a cron-fired interpreter binary set the tone.Miscmedium#linux#medium#hacktheboxFeb 21, 2026
Hack The Box/WingDataWingData — Hack The BoxTelemetry and a lightweight API share the same under-protected gateway.Misceasy#linux#easy#hacktheboxFeb 14, 2026
Hack The Box/FactsFacts — Hack The BoxA fact-checking microservice and an admin export feature create the entry lane.Misceasy#linux#easy#hacktheboxJan 31, 2026
UofTCTF 2026/baby web·100ptsbaby web — UofTCTF 2026Intro web challenge from UofTCTF 2026.WebeasyBlog#web#2026#uoftctf-2026Jan 12, 2026
UofTCTF 2026/Beginner's Luck·50ptsBeginner's Luck — UofTCTF 2026Warm-up from UofTCTF 2026 — see CTFtime writeups.MisceasyCTFtime#misc#2026#uoftctf-2026Jan 12, 2026
Hack The Box/EloquiaEloquia — Hack The BoxWindows hardening is present but uneven: LDAP signs, yet a legacy exchange of tokens on an internal API.Miscinsane#windows#insane#hacktheboxDec 13, 2025
Hack The Box/MonitorsFourMonitorsFour — Hack The BoxA monitoring suite and an agent installer leave several soft seams.Misceasy#windows#easy#hacktheboxDec 6, 2025
HKCERT CTF 2025/Web-001·200ptsWeb-001 — HKCERT CTF 2025Web challenge from HKCERT 2025 qualifier/finals track.WebmediumBlog#web#hkcert-ctf-2025#hkcertNov 30, 2025
HKCERT CTF 2025/Welcome·50ptsWelcome — HKCERT CTF 2025Sanity check — HKCERT CTF 2025.MisceasyBlog#misc#hkcert-ctf-2025#hkcertNov 30, 2025