About
I study security by solving things and writing down how they worked. This site is where those write-ups live: 108 of them so far, across CTF competitions, wargame platforms, and notes from working through the underlying concepts.
Competitions
- scriptCTF 2026 — 4th place
- NNS CTF 2026 — 17th place
What I work on
Mostly binary exploitation and reverse engineering, with a steady amount of cryptography and web. Several of the NNS challenges were 0day categories, so the write-ups there involve reading production source (Ladybird, Janet, Next.js, Kubernetes operators, router and vacuum firmware) rather than a prepared binary. I keep hunting for bugs outside competitions too.
How to read this
Each post has the challenge, the actual bug, and the exploit. I leave the wrong turns in — a few of these only worked after I had been wrong about them twice, and that is usually the part worth reading.