Tag Index

• Privilage escalation 1
• Ssrf 1
• Openredirect 1
• Ssti 1
• Bash 1
• Others 2
• Ctf 1
• Web exploitation 20
• C 3
• Reverse 8
• Exploit 1
• Secconctf 11
• Misc 5
• Python 1
• Programming 4
• Forensic 7
• Crypto 7
• Pentest 1
• Stegano 1
• Web 1
• Algorithm 4
• Icectf 6
• Onlinejudge 1
• Gemastik 15
• Pwnable 2
• Cyberjawara 1
• Compfest 1
• Idsecconf 6
• Pwnerrank 1
• Hitcon 2
• Itrace 1
• Akictf 1
• Xss 2
• Fitfunfest 1
• Fitctf 1
• Sqlinjection 2
• Bitcoinctf 1
• Rce 1
• Securityfest 3
• Beefest 1
• Csaw 1
• Hackthebox 3
• Websec.fr 2
• Angstromctf 1
• Nuitduhack 2
• Cve 1
• Hacktoday 1
• Tokopedia 2
• Arkavidia 1
• Hackerone 2
• Fbctf 1
• Bukalapak 1
• Nahamcon2021 1
• Web 1
• Dota2 1

Privilage escalation

• Basic Linux Privilage EscalationJuly 17, 2014

Ssrf

• SSTI MindMapsJuly 17, 2014

Openredirect

• SSTI MindMapsJuly 17, 2014

Ssti

• SSTI MindMapsJuly 17, 2014

Bash

• Bermain Dengan Bash #1July 17, 2014

Others

• Exploitasi EL InjectionOctober 26, 2014
• Install De-ice for Virtual Hacking LabSeptember 29, 2014

Ctf

• Sharif CTF: Mongo Db InjectionOctober 21, 2014

Web exploitation

• Hitcon 2016 : Secure PostOctober 10, 2016
• Hitcon 2016 : Are you richOctober 10, 2016
• Penjelasan PHP Object Injection Via UnserializeOctober 01, 2016
• Pwnerrank CTF 2016 : Web ChallengesSeptember 14, 2016
• Idsecconf CTF 2016 : Webwob - 100August 29, 2016
• Idsecconf CTF 2016 : Headshoot - 200August 29, 2016
• Compfest CTF 2016 : Maze - Web 90PtsAugust 27, 2016
• Gemastik CTF 2016 : Intranet Maintenance - 125August 15, 2016
• Gemastik CTF 2016 : Incident Analysis - 100August 15, 2016
• Gemastik CTF 2016 : Evote System - 150August 15, 2016
• Gemastik CTF 2016 : E-Government Repository - 75August 15, 2016
• Gemastik CTF 2016 : Administrator Login - 50August 15, 2016
• IceCTF 2015: Bomb - Web 40ptsSeptember 22, 2015
• SchoolCTF 2014 : Stored Pass 100ptsMay 04, 2015
• SchoolCTF 2014 : Shop of goodness 100ptsMay 04, 2015
• SchoolCTF 2014 : School Incident 150ptsMay 04, 2015
• Seccon CTF 2014: Bleeding “Heartbleed” - Web 300 ptsDecember 09, 2014
• Seccon CTF 2014: REA-JUU WATCH Web 200ptsDecember 09, 2014
• Seccon CTF 2014: Jspuzzle - Web 200ptsDecember 09, 2014
• Sharif CTF: Mongo Db InjectionOctober 21, 2014

C

• Latihan Soal C Part 3December 04, 2014
• Latihan Soal C Part 2November 18, 2014
• Latihan Soal C Part 1November 16, 2014

Reverse

• FIT FUNFEST 2017 : EncryptedELFMarch 16, 2017
• Idsecconf CTF 2016 : Signal - 150August 29, 2016
• Idsecconf CTF 2016 : Kopi - 50August 29, 2016
• Idsecconf CTF 2016 : Bit - Reverse 100ptsAugust 29, 2016
• Gemastik CTF 2016 : Power Plant - 125August 15, 2016
• Gemastik CTF 2016 : Java Authentication - 50August 15, 2016
• Seccon CTF 2014: Reverseit - Binary 100ptsDecember 21, 2014
• Belajar Reversee EngineeringNovember 18, 2014

Exploit

• Multiple Vulnerability xEpan 1.0.4November 28, 2014

Secconctf

• Seccon CTF 2014: Reverseit - Binary 100ptsDecember 21, 2014
• Seccon CTF 2014: Get The Key - Forensic 100ptsDecember 21, 2014
• Seccon CTF 2014: Easy Cipher - Crypto 100ptsDecember 21, 2014
• Seccon CTF 2014: Choose the number - Programming 100PtsDecember 21, 2014
• Seccon CTF 2014: Get The Key.txt - Forensic 100PtsDecember 19, 2014
• Seccon CTF 2014: Bleeding “Heartbleed” - Web 300 ptsDecember 09, 2014
• Seccon CTF 2014: REA-JUU WATCH Web 200ptsDecember 09, 2014
• Seccon CTF 2014: The Flag Awakens - QR 300ptsDecember 09, 2014
• Seccon CTF 2014: Get curious “FTP” server - Network 300ptsDecember 09, 2014
• Seccon CTF 2014: Jspuzzle - Web 200ptsDecember 09, 2014
• Seccon CTF 2014: Welcome to SECCON CTFDecember 09, 2014

Misc

• Gemastik CTF 2016 : Can You See Mee - 50August 15, 2016
• IceCTF 2015: WriteupsSeptember 04, 2015
• SchoolCTF 2014 : Weird Selfie 100ptsMay 04, 2015
• Seccon CTF 2014: Get curious “FTP” server - Network 300ptsDecember 09, 2014
• Seccon CTF 2014: Welcome to SECCON CTFDecember 09, 2014

Python

• Python CheatsheetDecember 09, 2014

Programming

• Idsecconf CTF 2016 : Sequence - 100August 29, 2016
• IceCTF 2015: Statistics - Programming 50September 22, 2015
• Seccon CTF 2014: Choose the number - Programming 100PtsDecember 21, 2014
• Seccon CTF 2014: The Flag Awakens - QR 300ptsDecember 09, 2014

Forensic

• Gemastik CTF 2016 : Malware Scanning - 125August 15, 2016
• Gemastik CTF 2016 : Insider Threat - 150August 15, 2016
• IceCTF 2015: Logoventures 2 Reloaded - Forensic 40ptsSeptember 22, 2015
• SchoolCTF 2014 : Tricky Authorization 200ptsMay 04, 2015
• SchoolCTF 2014 : Hidden File 200ptsMay 04, 2015
• Seccon CTF 2014: Get The Key - Forensic 100ptsDecember 21, 2014
• Seccon CTF 2014: Get The Key.txt - Forensic 100PtsDecember 19, 2014

Crypto

• Gemastik CTF 2016 : RSA Factorization - 100August 15, 2016
• Gemastik CTF 2016 : Encrypted Picture - 75August 15, 2016
• Gemastik CTF 2016 : Classic Crypto - 50August 15, 2016
• EkoParty Pre-CTF 2015: Crypto50September 16, 2015
• EkoParty Pre-CTF 2015: Crypto 25September 16, 2015
• SchoolCTF 2014 : Tacticus abilitus 100ptsMay 04, 2015
• Seccon CTF 2014: Easy Cipher - Crypto 100ptsDecember 21, 2014

Pentest

• Report Lomba Pentest Universitas JemberDecember 22, 2014

Stegano

• SchoolCTF 2014 : Strange spam 100ptsMay 04, 2015

Web

• SchoolCTF 2014 : Unusual redirection 300ptsMay 04, 2015

Algorithm

• Review 2-3 TreeJune 16, 2015
• Review Deap TreeJune 16, 2015
• Review Red Black TreeJune 16, 2015
• Pengenalan Binary Search TreeJune 04, 2015

Icectf

• IceCTF 2015: Statistics - Programming 50September 22, 2015
• IceCTF 2015: Logoventures 2 Reloaded - Forensic 40ptsSeptember 22, 2015
• IceCTF 2015: Bomb - Web 40ptsSeptember 22, 2015
• EkoParty Pre-CTF 2015: Crypto50September 16, 2015
• EkoParty Pre-CTF 2015: Crypto 25September 16, 2015
• IceCTF 2015: WriteupsSeptember 04, 2015

Onlinejudge

• Jollybeoj: 18-Duel MautAugust 03, 2016

Gemastik

• Gemastik CTF 2016 : RSA Factorization - 100August 15, 2016
• Gemastik CTF 2016 : Python Server - 100August 15, 2016
• Gemastik CTF 2016 : Power Plant - 125August 15, 2016
• Gemastik CTF 2016 : Malware Scanning - 125August 15, 2016
• Gemastik CTF 2016 : Lottery Machine - 125August 15, 2016
• Gemastik CTF 2016 : Java Authentication - 50August 15, 2016
• Gemastik CTF 2016 : Intranet Maintenance - 125August 15, 2016
• Gemastik CTF 2016 : Insider Threat - 150August 15, 2016
• Gemastik CTF 2016 : Incident Analysis - 100August 15, 2016
• Gemastik CTF 2016 : Evote System - 150August 15, 2016
• Gemastik CTF 2016 : Encrypted Picture - 75August 15, 2016
• Gemastik CTF 2016 : E-Government Repository - 75August 15, 2016
• Gemastik CTF 2016 : Classic Crypto - 50August 15, 2016
• Gemastik CTF 2016 : Can You See Mee - 50August 15, 2016
• Gemastik CTF 2016 : Administrator Login - 50August 15, 2016

Pwnable

• Gemastik CTF 2016 : Python Server - 100August 15, 2016
• Gemastik CTF 2016 : Lottery Machine - 125August 15, 2016

Cyberjawara

• Cyber Jawara 2016 : Web Info - 50PtsAugust 25, 2016

Compfest

• Compfest CTF 2016 : Maze - Web 90PtsAugust 27, 2016

Idsecconf

• Idsecconf CTF 2016 : Webwob - 100August 29, 2016
• Idsecconf CTF 2016 : Signal - 150August 29, 2016
• Idsecconf CTF 2016 : Sequence - 100August 29, 2016
• Idsecconf CTF 2016 : Kopi - 50August 29, 2016
• Idsecconf CTF 2016 : Headshoot - 200August 29, 2016
• Idsecconf CTF 2016 : Bit - Reverse 100ptsAugust 29, 2016

Pwnerrank

• Pwnerrank CTF 2016 : Web ChallengesSeptember 14, 2016

Hitcon

• Hitcon 2016 : Secure PostOctober 10, 2016
• Hitcon 2016 : Are you richOctober 10, 2016

Itrace

• ITRACE 2016 : WriteupsOctober 10, 2016

Akictf

• AkiCTF WriteupsJanuary 30, 2017

Xss

• Got Access To Dota 2 Admin Panel By Exploiting In-Game FeatureMarch 31, 2022
• XSS Appspot Writeup: Level 1 - 5January 31, 2017

Fitfunfest

• FIT FUNFEST 2017 : ProxyMarch 16, 2017

Fitctf

• FIT FUNFEST 2017 : EncryptedELFMarch 16, 2017

Sqlinjection

• BitcointCTF 2017: WriteupsMarch 23, 2017
• SQLInjection Challenges Writeup: Level 1 - 8March 20, 2017

Bitcoinctf

• BitcointCTF 2017: WriteupsMarch 23, 2017

Rce

• SecurityFest CTF 2017 : A Temple JestJune 02, 2017

Securityfest

• SecurityFest CTF 2017 : UnderconstructionJune 02, 2017
• SecurityFest CTF 2017 : Freddy Vs JSONJune 02, 2017
• SecurityFest CTF 2017 : A Temple JestJune 02, 2017

Beefest

• BeeFest CTF 2017: WriteupsAugust 21, 2017

Csaw

• CSAW CTF 2017: LittleQuery - 200September 18, 2017

Hackthebox

• Writeup Hackthebox - SenseMarch 25, 2018
• Writeup Hackthebox - EnterpriseMarch 18, 2018
• Writeup Hackthebox - ValentineMarch 09, 2018

Websec.fr

• Websec.fr babysteps: Level 04 - 1ptsMarch 22, 2018
• Websec.fr babysteps: Level 01 - 1ptsMarch 22, 2018

Angstromctf

• Angstrom CTF 2018 : Web ChallengesMarch 24, 2018

Nuitduhack

• Nuitduhack Quals 2018: PixEditor - 350ptsApril 01, 2018
• Nuitduhack Quals 2018: CoinGame - 200ptsApril 01, 2018

Cve

• Monstra CMS - 3.0.4 Login Rate Limiting BypassApril 01, 2018

Hacktoday

• Hacktoday Quals 2018 - LegcounterAugust 05, 2018

Tokopedia

• How I Hack Tokopedia (3rd server) with Object de-SerializationNovember 21, 2018
• Improper Access Control & XSS on seller.tokopedia.comNovember 14, 2018

Arkavidia

• Arkavidia 5: Fancafe LoonaFebruary 14, 2019

Hackerone

• HackerOne H1-2006 2020 CTF WriteupJune 01, 2020
• Writeup Hackerone 50M CTF H1 702March 27, 2019

Fbctf

• Writeup Secret Note Keeper (xs-leaks) Facebook CTF 2019July 03, 2019

Bukalapak

• Open redirect -> Account Takeover pada bukalapak.comJuly 14, 2020

Nahamcon2021

• Writeup Nahamcon 2021 CTF - Web ChallengesMarch 15, 2021

Web

• Got Access To Dota 2 Admin Panel By Exploiting In-Game FeatureMarch 31, 2022

Dota2

• Got Access To Dota 2 Admin Panel By Exploiting In-Game FeatureMarch 31, 2022