Curated security-learning notes focused on methodology, enumeration discipline, and clear reporting.
This repository contains a small set of CTF walkthroughs and notes from authorized training labs.
It is intentionally not a large collection of copied answers. The goal is to show how I approach security problems: enumerate carefully, validate assumptions, document the attack path, and explain the lesson learned.
My main portfolio focus is AI automation, e-commerce systems, and industrial software. This CTF repo supports that profile by showing security awareness and disciplined debugging, not by trying to become a cybersecurity content farm.
The format is based on common CTF writeup conventions used across Hack The Box, TryHackMe, and public security blogs:
- Scope and target summary.
- Enumeration.
- Attack path.
- Privilege escalation reasoning.
- Lessons learned.
- Redacted flags and secrets.
| Lab | Focus | Status |
|---|---|---|
| Silver Platter | Web app auth bypass, IDOR, log review, Docker credential discovery | Sanitized |
| Pyrat | Python service enumeration, interpreter behavior, source discovery attempts | Sanitized notes |
See methodology.md.
All notes are for authorized CTF environments only. Do not use these techniques on systems you do not own or have explicit permission to test.