Writeups from CTFs I've participated in.https://butteredtoast.vercel.app/https://butteredtoast.vercel.app/writeups/moosespell/https://butteredtoast.vercel.app/writeups/moosespell/Stored XSSSun, 02 Aug 2026 00:00:00 GMTwebVuwCTF 2026https://butteredtoast.vercel.app/writeups/paper-trail/https://butteredtoast.vercel.app/writeups/paper-trail/Textbook JWT forgerySun, 17 May 2026 00:00:00 GMTwebTJCTF 2026https://butteredtoast.vercel.app/writeups/cascading-the-seven-seas/https://butteredtoast.vercel.app/writeups/cascading-the-seven-seas/Extracting memory from a CSS VM and reverse-engineeringSun, 05 Apr 2026 00:00:00 GMTwebRITSEC CTF 2026https://butteredtoast.vercel.app/writeups/sanchess/https://butteredtoast.vercel.app/writeups/sanchess/Python eval injection via a chess app API to extract a flag using blind binary search.Sun, 28 Dec 2025 00:00:00 GMTwebASIS CTF Final 2025https://butteredtoast.vercel.app/writeups/forger/https://butteredtoast.vercel.app/writeups/forger/Leaking a Flask secret key from git history to forge an admin session cookie.Fri, 12 Dec 2025 00:00:00 GMTwebWinterCTF 2025https://butteredtoast.vercel.app/writeups/glacier/https://butteredtoast.vercel.app/writeups/glacier/Reversing a .NET binary to extract and decrypt a flag.Fri, 12 Dec 2025 00:00:00 GMTreversingWinterCTF 2025https://butteredtoast.vercel.app/writeups/pikamans/https://butteredtoast.vercel.app/writeups/pikamans/Stack buffer overflow to manipulate hp and lvl variables in a C binary.Fri, 12 Dec 2025 00:00:00 GMTpwnWinterCTF 2025https://butteredtoast.vercel.app/writeups/quad-encoding/https://butteredtoast.vercel.app/writeups/quad-encoding/Automated decoding through 58 layers of Base64, zlib, hex, and binary.Fri, 12 Dec 2025 00:00:00 GMTreversingWinterCTF 2025https://butteredtoast.vercel.app/writeups/fishsite/https://butteredtoast.vercel.app/writeups/fishsite/SQL injection and blind SQLi to extract a flag.Sat, 06 Dec 2025 00:00:00 GMTwebVuwCTF 2025