M4cCrypt0
M4cCrypt0

// hack. learn. repeat. — notes, writeups and lab journal on the road to freelance security work.

$ grep -ri
all binary exploitation (8) blue-team (3) ctf (13) forensics (3) hardware (2) privilege escalation (3) python (3) red team (13) thm (12) walkthrough (10) web-exploitation (6) cloud (1) cryptography (1) foundation (1) lab (1)

August 2026

2026-08-11 writeup cryptographyforensicspythonthmwalkthrough

Management Wants a Word: DPAPI All the Way Into a VeraCrypt Vault

Housekeeping found a guest laptop after an early checkout. Room 214, registered to vera. IT pulled a full KAPE triage before wiping it. The room is Forensics / Hard, and the whole thing is one long c…
2026-08-08 writeup blue-teamctfforensicspythonthmwalkthrough

Fileless WMI Persistence: Hunting a Hijacked CIM Class (TryHackMe: After Hours

Turned out to be a fileless persistence chain: a legit-looking WMI class carrying a Deflate-compressed .NET loader as a "static property", fired by an EventFilter / CommandLineEventConsumer pair with…
2026-08-03 writeup Privilege EscalationpythonRed Teamthmweb-exploitation

TryHackMe Resort write-up

Boot2Root via unsafe YAML deserialization (yaml.load RCE) on a Flask jukebox app, a dash-vs-bash reverse-shell pitfall, and privilege escalation from a root password leaked in a process command line.