> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/ctf-writeups.md).

# CTF writeups

- [2022 CTFs](https://heapbytes.gitbook.io/notes/ctf-writeups/2022-ctfs.md)
- [HTB Santa CTF 2022](https://heapbytes.gitbook.io/notes/ctf-writeups/2022-ctfs/htb-santa-ctf-2022.md)
- [Technovanza 2022](https://heapbytes.gitbook.io/notes/ctf-writeups/2022-ctfs/technovanza-2022.md)
- [2023 CTFs](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs.md): Few soln for challenges that I though to share.
- [Blackhat MEA CTF](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/blackhat-mea-ctf.md): https://ctftime.org/ctf/826/
- [Web - Authy](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/blackhat-mea-ctf/web-authy.md)
- [YCTF (week 2 - 9 Dec 23)](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23.md): A win!!
- [Web Security](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security.md)
- [IE10.1](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/ie10.1.md): http://yctfinternet.liveblog365.com/
- [Confluence](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/confluence.md): http://139.59.45.27:8090/admin/flag.tar.gz
- [Cookie](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/cookie.md): Challenge link: https://cookiechallenge.pythonanywhere.com/
- [Misc - Never found](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/misc-never-found.md)
- [VM - boot2root](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/vm-boot2root.md): https://tryhackme.com/room/yctfweek2Mv
- [Reversing - Easy](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/reversing-easy.md)
- [2024 CTFs](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs.md)
- [Down Under CTF](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf.md)
- [Beginner](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner.md)
- [tldr please summarise](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner/tldr-please-summarise.md)
- [parrot the emu](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner/parrot-the-emu.md)
- [Sun Zi's Perfect Math Class](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner/sun-zis-perfect-math-class.md)
- [zoo feedback form](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner/zoo-feedback-form.md)
- [shufflebox](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/down-under-ctf/beginner/shufflebox.md)
- [HackTheBoo](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/hacktheboo.md)
- [Practice](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/hacktheboo/practice.md)
- [Web - Void Whispers](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/hacktheboo/practice/web-void-whispers.md)
- [Web - Unholy Union](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/hacktheboo/practice/web-unholy-union.md)
- [Web - Phantom's Script](https://heapbytes.gitbook.io/notes/ctf-writeups/2024-ctfs/hacktheboo/practice/web-phantoms-script.md)
- [2025 CTFs](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs.md)
- [Pico CTF](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/pico-ctf.md)
- [3v@l](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/pico-ctf/3v-l.md)
- [WebSockFish](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/pico-ctf/websockfish.md)
- [Payatu CTF](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf.md)
- [Infrastructure](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf/infrastructure.md)
- [Web](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf/web.md)
- [Secure Upload](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf/web/secure-upload.md): File upload bypass - Magic bytes
- [Travel Agency](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf/web/travel-agency.md): LFI + RFI
- [Blind Trust](https://heapbytes.gitbook.io/notes/ctf-writeups/2025-ctfs/payatu-ctf/web/blind-trust.md): NOSQLi