https://zeke.cat/en/tags/htb/index.htmlHugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.https://zeke.cat/en/ctf/tombwatcher/index.htmlTue, 06 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/tombwatcher/index.htmlombwatcher serves a straight forward demonstration for a **Active Directory** attack chain for **Lateral Movement**, where you discover deleted **Active Directory Objects** which contains permissions required to attack an **Active Directory Certificate Services** instance.https://zeke.cat/en/ctf/pov/index.htmlMon, 05 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/pov/index.htmlA demonstration of using **File Disclosure** to find sensitive keys enabling a **Object Deserialization** attack for command execution, followed by finding exposed credentials leading to **SeDebugPrivilege** abuse.https://zeke.cat/en/ctf/postman/index.htmlTue, 30 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/postman/index.html**Postman** brings exposure to a misconfigured **Redis** instance, leading into a hunt for interesting readable files, and a finale interaction through a web-based system administration tool.https://zeke.cat/en/ctf/trick/index.htmlMon, 22 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/trick/index.htmlTrick provides a field to practice **Web Recon** techniques, **Local File Inclusion** vulnerabilities to view environment configurations, and an interesting interaction with **Fail2Ban**.https://zeke.cat/en/ctf/jeeves/index.htmlWed, 17 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/jeeves/index.htmlDiscovering your foothold through a **Jenkins** web application, a test on file enumeration and uncovering alternate data streams.https://zeke.cat/en/ctf/fluffy/index.htmlMon, 15 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/fluffy/index.htmlFluffy provides a strong introduction into AD Certificate Services, a relevant testing tool **Certipy**, and your common **ACL** abuse.