nerdymark.com

CTF challenge writeups and security puzzles by Mark LaCore.

🏳️‍🌈 🏳️‍⚧️ 🇺🇦 🧩

Ctf Posts

CTF challenge writeups and security puzzles by Mark LaCore.

Recent Posts

🏎️ Confession Booth CTF: Race Condition Privilege Escalation

Confession Booth CTF writeup: race condition exploit between user registration and permission assignment.

2026-01-28 12:00:00 | ctf

🔐 State of Affairs CTF Challenge Writeup

State of Affairs CTF writeup: Terraform state poisoning via TF_DATA_DIR and malicious provider injection.

2026-01-06 12:00:00 | ctf

👻 Malware Busters CTF Challenge Writeup

Malware Busters CTF writeup: Go binary reverse engineering with UPX, garble obfuscation, and AES-CBC.

2025-12-21 12:00:00 | ctf

☸️ Game of Pods CTF Challenge Writeup

Game of Pods CTF writeup: Kubernetes privilege escalation via SSRF, path traversal, and nodes/proxy.

2025-12-10 12:00:00 | ctf

🪡 Needle in a Haystack CTF Challenge Writeup

Needle in a Haystack CTF writeup: client-side bypass and GitHub OSINT to exploit exposed API secrets.

2025-10-07 12:00:00 | ctf

Ctf Posts

🏎️ Confession Booth CTF: Race Condition Privilege Escalation

ctf

2026-01-28 12:00:00 15 min read

Confession Booth CTF writeup: race condition exploit between user registration and permission assignment.

Read more...

🔐 State of Affairs CTF Challenge Writeup

ctf

2026-01-06 12:00:00 12 min read

State of Affairs CTF writeup: Terraform state poisoning via TF_DATA_DIR and malicious provider injection.

Read more...

👻 Malware Busters CTF Challenge Writeup

ctf

2025-12-21 12:00:00 18 min read

Malware Busters CTF writeup: Go binary reverse engineering with UPX, garble obfuscation, and AES-CBC.

Read more...

☸️ Game of Pods CTF Challenge Writeup

ctf

2025-12-10 12:00:00 15 min read

Game of Pods CTF writeup: Kubernetes privilege escalation via SSRF, path traversal, and nodes/proxy.

Read more...

🪡 Needle in a Haystack CTF Challenge Writeup

ctf

2025-10-07 12:00:00 10 min read

Needle in a Haystack CTF writeup: client-side bypass and GitHub OSINT to exploit exposed API secrets.

Read more...

🏆 Wiz Cloud Security Championship - Maximum Points!

ctf

2025-09-17 14:00:00

Reached maximum points in the Wiz Cloud Security Championship with 3 challenges completed.

🏆 Wiz Cloud Security Championship - Maximum Points!

Read more...

🔐 Azure OAuth CTF Challenge Writeup

ctf

2025-09-07 12:00:00 12 min read

Breaking The Barriers CTF writeup: Azure OAuth privilege escalation via dynamic groups and guest invitations.

Read more...