@one-eight-seven.bsky.social
JailCTF 2026 Format Write Up A pyjail with no output channel at all. You can only count prompts. `{0[N].__len__}` turns each character into an address, and ASLR moves whole pages, so the last 3 hex digits never move. #ctf #infosec #netsec #jailctf2026 blog.roblab.us/jailctf-2026...
jailCTF 2026: format Write Up
The jail prints nothing and swallows every exception, so all you can measure is how many prompts come back. CPython's one-character string cache is what makes that enough.
blog.roblab.us
TJCTF 2026: triplets Write Up blog.roblab.us/writeups/tjc... A TJCTF 2026 forensics challenge: a 1888x1888 grayscale image was really a 2000x594 RGB photo flattened R,G,B and reshaped. The PNG metadata gave it away. The banding was the interleave signature. #ctf #infosec #rootrunners
TJCTF 2026: triplets Write Up
A TJCTF 2026 forensics challenge where a 1888x1888 grayscale image was actually a 2000x594 RGB photo flattened R,G,B,R,G,B and reshaped. The PNG metadata gave it away, and the banded texture was the v...
blog.roblab.us
TJCTF 2026: loud-packets Write Up blog.roblab.us/writeups/tjc... A TJCTF 2026 forensics challenge hiding a Hellschreiber transmission inside a fake Bluetooth pcap. The audio looks like a protocol but is actually painted text, and the spectrogram is its own decoder. #ctf #infosec #rootrunners
TJCTF 2026: loud-packets Write Up
A TJCTF 2026 forensics challenge hiding a Hellschreiber transmission inside a fake Bluetooth pcap. The audio looks like a protocol but is actually painted text, and the spectrogram is its own decoder.
blog.roblab.us
TJCTF 2026: Nesting Write Up blog.roblab.us/tjctf-2026-n... TJCTF 2026's 'nesting' forensics challenge was a Russian doll. The .mp4 extension hid a Matroska container, which hid 50 PCM tracks which hid two 21-character strings, one XOR away from the flag. #ctf #infosec #rootrunners
TJCTF 2026: Nesting Write Up
TJCTF 2026's 'nesting' forensics challenge was a Russian doll. The .mp4 extension hid a Matroska container, which hid 50 PCM tracks plus 12 chapter markers plus 460 subtitle events, which hid two 21-c...
blog.roblab.us
Finding Your Sec: Initial Thoughts After Joining My First CTF Team blog.roblab.us/finding-your... #CTF #Infosec #Cybersecurity #Opinion
Finding Your Sec: Initial Thoughts After Joining My First CTF Team
Most posts tell you to join a CTF team and leave it at that. This one covers what happens after: the adjustment period, the learning curve, the friction, and why all of it is worth it if you find the ...
blog.roblab.us
CodeVinci CTF 2026: Call Center Write-up blog.roblab.us/writeups/cod... #ctfwriteups #CodeVinciCTF2026 #rootrunners
CodeVinci CTF 2026: Call Center
Fake BSOD, hidden SVG with ASCII-encoded Telegram bot handle, and a scam script that gives up the flag when you feed it an EXIF field as a gift card code. Four stages, one loop.
blog.roblab.us
blog.roblab.us/writeups/uni... #ctfwriteup #UniVsThreats26Quals #rootrunners
UniVsThreats26 Quals: Andromeda Casino - Horses Writeup
Why string length equals guaranteed victory: our 50-character breed string crosses the finish line while the casino's fastest horse barely leaves the gate.
blog.roblab.us
blog.roblab.us/writeups/uni... #ctfwriteup #UniVsThreats26Quals #rootrunners
UniVsThreats26 Quals: Andromeda Casino - Cards
The card game's create_card() function is public with no access control, letting anyone mint cards with arbitrary values. Instead of playing the rigged game (player cards 0-3, house cards 10-13), forg...
blog.roblab.us
blog.roblab.us/bitsctf-2026... #ctfwriteup #bitsctf2026 #rootrunners
BITSCTF 2026 - Lattices Wreck Everything Writeup
Falcon-512 with 85% of the private key leaked. The bundled library builds a 589-dim lattice that hangs indefinitely. The faster path: reduce to 76 unknowns, embed 200 equations in a 277-dim Kannan lat...
blog.roblab.us
BITSCTF 2026 - Internet RabbitHole Writeup blog.roblab.us/writeups/bit...
BITSCTF 2026 - Internet RabbitHole Writeup
Category: OSINT Difficulty: Easy/Medium A multi-platform OSINT chain starting from a LinkedIn profile with a hidden Instagram username in the banner image. The trail led through Instagram, a perso...
blog.roblab.us
I just solved Bellingcat's 'Symbolic Literacy' challenge 🏆 Try it yourself! challenge.bellingcat.com
Bellingcat Open Source Challenge
Test your open source research skills.
challenge.bellingcat.com
I just solved Bellingcat's 'Fascist Echoes' challenge 🏆 Try it yourself! challenge.bellingcat.com
Bellingcat Open Source Challenge
Test your open source research skills.
challenge.bellingcat.com
