My personal archive of CTF challenges and lab walkthroughs! This repository serves as a knowledge base and study guide tracking my progression across various cybersecurity training platforms. Inside, you'll find comprehensive notes and exploitation methodologies for the environments I've compromised.

Profiles

• TryHackMe — tryhackme.com/p/bobbybojanglles
• Hack The Box — app.hackthebox.com/users/816258

Walkthroughs

Below is an index of the environments documented in this repository:

Platform	Target Name	Difficulty level	Overview
	Watcher	Medium	A classic boot2root Linux scenario focusing on web exploitation flows (LFI) and chained privilege escalation techniques to gain root access.
	LazyAdmin	Easy	Exploiting a SweetRice CMS backup leak to crack credentials, uploading a PHP reverse shell through an ads injection vulnerability, and escalating to root via a writable Perl backup script.
	Codify	Easy	Exploiting a vm2 sandbox escape (CVE-2023-30547) for initial access, cracking a bcrypt hash from a SQLite database for lateral movement, and abusing a bash glob pattern bypass with pspy to leak root credentials.
	Madness	Easy	An image forensics and path brute forcing challenge that leads to SSH access via ROT13, ending in a SUID privilege escalation to root.
	Net Sec Challenge	Easy	A network security skills challenge using Nmap banner grabbing to find hidden flags, Hydra to brute force FTP credentials, and a stealthy Null scan to evade IDS detection.
	Opacity	Easy	Exploiting an insecure file upload to grab a KeePass database and escalating privileges through cracked credentials and an insecure backup script.
	Phishing Analysis Fundamentals	Easy	A walkthrough of email anatomy, delivery protocols, header analysis, body inspection, and common phishing attack types for SOC analysts.
	Pickle Rick	Easy	A Rick and Morty themed web exploitation challenge where you bypass command execution filters to find all the ingredients to turn Rick back into a human.
	The Greenholt Phish	Easy	Investigating a Business Email Compromise phishing email through header analysis, SPF/DMARC validation, and malicious attachment forensics.
	UltraTech	Medium	Enumerating a Node.js REST API and Apache web server, exploiting a command injection vulnerability in a ping endpoint to dump an SQLite database, cracking MD5 hashes, and escalating to root via Docker group membership.
	Willow	Medium	Decoding a hex-encoded RSA-encrypted SSH key found via NFS, cracking the key passphrase with John the Ripper, escalating to root through a sudo mount exploit, and recovering the root flag from a steganography image.
	Internal	Hard	Cracking WordPress credentials to get a shell via the theme editor, pivoting through leaked credentials to a low-privileged user, brute forcing an internal Jenkins instance over an SSH tunnel, and gaining RCE through the Jenkins Script Console.
	Cat Pictures 2	Easy	Recovering Gitea credentials from image metadata, weaponizing an Ansible playbook triggered through an OliveTin runner for a shell as a low-privileged user, and escalating to root via the sudo Baron Samedit heap overflow (CVE-2021-3156).
	Super Secret Tip	Medium	Leaking Flask source code to find an SSTI vulnerability, recovering an XOR-encoded debug password, spoofing an IP-based access check, achieving RCE via Jinja2 sandbox escape, and chaining a writable .profile with a root cron job to read protected files.
	Management Wants a Word	Hard	Recovering a Windows DPAPI master key with pypykatz to decrypt Chrome-saved credentials, using them to unlock a hidden VeraCrypt container, and extracting a steganographic flag from a JPEG2000 image embedded in a fake PDF invoice.
	Grand Larceny Auto II	Medium	Decompiling a Godot game with GDRE Tools to recover a hardcoded HMAC key, replaying the game's "proof of play" checkpoint API over curl with rotating tokens, and reaching the real flag by deriving a staff role from dead client-side code the claim signature never covers.

Projects

Self-directed labs outside of platform rooms — building and defending my own infrastructure rather than attacking someone else's.

Project	Overview
Home Network Honeypot & Threat Detection Lab	A self-hosted T-Pot honeypot on an isolated VLAN, capturing and analyzing live internet-wide scanning and exploitation attempts (Mirai/Prometei infections, DoublePulsar, Apache ActiveMQ RCE, SIP toll-fraud dialers, a current Next.js RCE), enriched with SpiderFoot OSINT and correlated through a custom Wazuh SIEM ruleset.