A personal archive of challenges solved across several CTF platforms, with write-ups, exploit scripts, and supporting artifacts (scans, binaries, captures, loot) kept alongside each challenge.
Most RootMe write-ups are in French and follow a Description / Exploit
format inside that challenge's own README.md.
.
├── rootme/ RootMe challenges, grouped by category
├── tryHackMe/ TryHackMe rooms/boxes
├── kafctf/ kafCTF challenges
└── isticctf/ ISTIC CTF challenges
| Challenge | Writeup |
|---|---|
| ch1 | sudo - weak configuration |
| ch7 | Perl - Command injection |
| ch8 | Python - PyJail 1 |
| ch9 | Python - PyJail 2 |
| ch10 | Python - Jail - Exec |
| ch11 | Bash - System 1 |
| ch12 | Bash - System 2 |
| ch13 | PHP - Jail |
| ch14 | Bash - Restricted shells |
| ch16 | Bash - unquoted expression injection |
| ch18 | Powershell - Command Injection |
| ch19 | Powershell - SecureString |
| ch20 | Powershell - Basic jail |
| ch21 | notes |
| ch23 | LaTeX - Input |
| ch24 | LaTeX - Command execution |
| SAH | SSH - Agent Hijacking |
| SOH | Shared Objects hijacking |
| python-pickle | Python - pickle |
| Docker-talk-through-me | Docker socket escape |
| docker-sys-admin | exploit/loot only, no writeup |
| Challenge | Writeup |
|---|---|
| ch72 | PE32 - Stack buffer overflow basic |
| ch13, ch14, ch35, ch45, ch45_s, ch65 | exploit/loot only, no writeup |
| Challenge | Writeup |
|---|---|
| ch8 | ELF x86 - CrackPass |
| ch20 | ELF x86 - No software breakpoints |
| ch23 | ELF ARM - Basic Crackme |
| ch27 | ELF MIPS - Basic Crackme |
| ch9, ch19, ch32, ch36, + Ghidra project | binaries/scripts only, no writeup |
The following categories hold exploit scripts, scans, and loot files per challenge, but no dedicated write-up yet:
rootme/crypto— PIDencryption, ch03/04/05/07/10/11/20 cryptrootme/forensic— ch12/13/21 forensicrootme/programming— captchaprog, quickresp, suiteprogrootme/realist— ch1/6/7 realistrootme/steganography— ch9/10/11/13/14/15/16 steg, LSB-Steganographyrootme/web-client— ch22clientrootme/web-server— ch13/18/21/35/36/37/38/43/44/45/47/49/50/53/55/59/60/61 webrootme/mrrobot,rootme/network,rootme/ctfalltheday— Mr. Robot VM, network pcap/firewall challenge, CTF-all-the-day boxes (LAMPCTF5, SSRFBox)
Boxes/rooms with exploit scripts, fuzzers, scans, and loot (creds, hashes, dumps). No dedicated write-ups yet:
exploit/— daily-bugle, skynet, overpass2, relevant, internal, vulnversitybrainpan1,brainstorm,bufferoverflow— binary exploitation / buffer overflow practicegatekeeper— Windows AD box (exploit, Firefox decrypt, loot)attackingkerberos— Kerberoasting / AS-REP roasting room
web/— web challenge scanmisc/— 707Rainbowspwn/— SimpleAuthorize
steg/— steganography challenge (LSB extraction, EXIF/metadata analysis)