Vincent's field notes
CTF writeups &
security research.
The challenges, the rabbit holes, and what I learned along the way. Notes on web exploitation, cloud security, and forensics.
Latest Logs
Latest writeups
From recent investigations and challenges.
HTB SpyBug: WAV/JavaScript Polyglot
Investigating a RIFF/WAVE upload bypass and the MIME-type restriction that can still prevent script execution.
HTB Sherlock: CrownJewel-1
VSS, an NTDS.dit copy, and four artifacts to piece it together. My quick notes from CrownJewel-1.
HTB Sherlock: OpTinselTrace-3
A suspicious Christmas gift, Volatility, and PowerShell logs. The bits I kept from OpTinselTrace-3.
HTB Sherlocks: Notes from the Blue Team Grind
Quick notes from 12 Sherlocks: useful artifacts, little gotchas, and things to remember for the next lab.
Research
Curated Link Vault
Saved references, docs, and challenge resources.
Map
Tag Navigation
Jump quickly by topic: web, cloud, pwn, rev, crypto.
Profile
CTF Timeline
Contest achievements, focus areas, and background.