https://zeke.cat/en/ctf/index.htmlFluffy Fluffy provides a strong introduction into AD Certificate Services, a relevant testing tool Certipy, and your common ACL abuse. Jeeves Discovering your foothold through a Jenkins web application, a test on file enumeration and uncovering alternate data streams. Trick Trick provides a field to practice Web Recon techniques, Local File Inclusion vulnerabilities to view environment configurations, and an interesting interaction with Fail2Ban. Postman Postman brings exposure to a misconfigured Redis instance, leading into a hunt for interesting readable files, and a finale interaction through a web-based system administration tool. Pov A demonstration of using File Disclosure to find sensitive keys enabling a Object Deserialization attack for command execution, followed by finding exposed credentials leading to SeDebugPrivilege abuse. TombWatcher ombwatcher serves a straight forward demonstration for a Active Directory attack chain for Lateral Movement, where you discover deleted Active Directory Objects which contains permissions required to attack an Active Directory Certificate Services instance. Media edia is unique for requiring a crafted video file for anNTLM Leak attack, followed by File System Redirection to an upload directory outside of webroot, then using SeTcbPrivilege to gain full system compromise.HugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.https://zeke.cat/en/ctf/tombwatcher/index.htmlTue, 06 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/tombwatcher/index.htmlombwatcher serves a straight forward demonstration for a **Active Directory** attack chain for **Lateral Movement**, where you discover deleted **Active Directory Objects** which contains permissions required to attack an **Active Directory Certificate Services** instance.https://zeke.cat/en/ctf/pov/index.htmlMon, 05 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/pov/index.htmlA demonstration of using **File Disclosure** to find sensitive keys enabling a **Object Deserialization** attack for command execution, followed by finding exposed credentials leading to **SeDebugPrivilege** abuse.https://zeke.cat/en/ctf/postman/index.htmlTue, 30 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/postman/index.html**Postman** brings exposure to a misconfigured **Redis** instance, leading into a hunt for interesting readable files, and a finale interaction through a web-based system administration tool.https://zeke.cat/en/ctf/trick/index.htmlMon, 22 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/trick/index.htmlTrick provides a field to practice **Web Recon** techniques, **Local File Inclusion** vulnerabilities to view environment configurations, and an interesting interaction with **Fail2Ban**.https://zeke.cat/en/ctf/jeeves/index.htmlWed, 17 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/jeeves/index.htmlDiscovering your foothold through a **Jenkins** web application, a test on file enumeration and uncovering alternate data streams.https://zeke.cat/en/ctf/fluffy/index.htmlMon, 15 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/fluffy/index.htmlFluffy provides a strong introduction into AD Certificate Services, a relevant testing tool **Certipy**, and your common **ACL** abuse.