Infosec Blog Posts

Blog posts and write-ups from years of self-taught infosec learning, including: CompTIA Sec+, CTF walkthroughs, other guides, and a few non-tech topics too.

So, You Want to CTF? (A Beginner’s Guide to CTFing)

CTF Writeups Oct 1, 2025
So, You Want to CTF? (A Beginner’s Guide to CTFing)

Microcorruption (Embedded Security CTF): Vancouver

CTF Writeups, Microcorruption Mar 9, 2023
Microcorruption (Embedded Security CTF): Vancouver

2021 Metasploit Community CTF Writeup

CTF Writeups Dec 6, 2021
2021 Metasploit Community CTF Writeup

WeCTF 2021 CSP1 Challenge Writeup

CTF Writeups Jun 20, 2021
WeCTF 2021 CSP1 Challenge Writeup

HTB Cyber Apocalypse (2021) Writeup for Web Challenges

CTF Writeups May 18, 2025
HTB Cyber Apocalypse (2021) Writeup for Web Challenges

2021 BSidesSF Writeup for Web and Cloud Challenges

CTF Writeups May 18, 2025
2021 BSidesSF Writeup for Web and Cloud Challenges

Getting a Job in Infosec: From Noob to OSCP to Hired in 434 Days

Career Oct 1, 2025
Getting a Job in Infosec: From Noob to OSCP to Hired in 434 Days

LED Therapy: Intro to Hardware Hacking Using the Neutrogena Light Therapy Mask

Hardware Oct 1, 2025
LED Therapy: Intro to Hardware Hacking Using the Neutrogena Light Therapy Mask

2020 December Metasploit Community CTF

CTF Writeup May 18, 2025
2020 December Metasploit Community CTF

TUCTF 2019: Web Challenges

CTF Writeup Feb 25, 2020
TUCTF 2019: Web Challenges

Pwnable.kr: ‘mistake’ Walkthrough

CTF Writeups Feb 25, 2020
Pwnable.kr: ‘mistake’ Walkthrough

Hack In Paris 2019 CTF – “Meet Your Doctor” (GraphQL challenge)

CTF Writeups Feb 25, 2020
Hack In Paris 2019 CTF – “Meet Your Doctor” (GraphQL challenge)

HackTheBox “Lame” (Retired) Walkthrough

HackTheBox Feb 25, 2020
HackTheBox “Lame” (Retired) Walkthrough

OOO DEF CON CTF 2019 Quals – “can’t even unplug it”

CTF Writeups Feb 25, 2020
OOO DEF CON CTF 2019 Quals – “can’t even unplug it”

SunshineCTF: Wrestler Name Generator

CTF Writeups Feb 25, 2020
SunshineCTF: Wrestler Name Generator

b00t2root CTF: EasyPhp

CTF Writeups Feb 25, 2020
b00t2root CTF: EasyPhp

MITRE CTF: Cyber Challenge 2019

CTF Writeups Feb 25, 2020
MITRE CTF: Cyber Challenge 2019

Microcorruption (Embedded Security CTF): Chernobyl

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Chernobyl

Microcorruption (Embedded Security CTF): Lagos

CTF Writeups, Microcorruption Feb 25, 2020
Microcorruption (Embedded Security CTF): Lagos

Microcorruption (Embedded Security CTF): Bangalore

CTF Writeups, Microcorruption Mar 9, 2023
Microcorruption (Embedded Security CTF): Bangalore

Burp Suite for Beginners Part 2: Spider, Intruder and Repeater

Pen Testing, Web Feb 25, 2020
Burp Suite for Beginners Part 2: Spider, Intruder and Repeater

Burp Suite for Beginners Part 1: Setup and Target/Proxy Tools

Pen Testing, Web Dec 30, 2023
Burp Suite for Beginners Part 1: Setup and Target/Proxy Tools

Microcorruption (Embedded Security CTF): Vladivostok

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Vladivostok

Microcorruption (Embedded Security CTF): Algiers

CTF Writeups, Microcorruption Oct 17, 2021
Microcorruption (Embedded Security CTF): Algiers

Microcorruption (Embedded Security CTF): Novosibirsk

CTF Writeups, Microcorruption Feb 25, 2020
Microcorruption (Embedded Security CTF): Novosibirsk

Using CSV Injection to Save KringleCon Christmas

CTF Writeups Feb 25, 2020
Using CSV Injection to Save KringleCon Christmas

Microcorruption (Embedded Security CTF): Addis Ababa

CTF Writeups, Microcorruption Oct 17, 2021
Microcorruption (Embedded Security CTF): Addis Ababa

Microcorruption (Embedded Security CTF): Jakarta

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Jakarta

Microcorruption (Embedded Security CTF): Santa Cruz

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Santa Cruz

Microcorruption (Embedded Security CTF): Montevideo

CTF Writeups, Microcorruption Oct 17, 2021
Microcorruption (Embedded Security CTF): Montevideo

Microcorruption (Embedded Security CTF): Whitehorse

CTF Writeups, Microcorruption Oct 17, 2021
Microcorruption (Embedded Security CTF): Whitehorse

Microcorruption (Embedded Security CTF): Reykjavik

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Reykjavik

Microcorruption (Embedded Security CTF): Cusco

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Cusco

Microcorruption (Embedded Security CTF): Johannesburg

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Johannesburg

Microcorruption (Embedded Security CTF): Hanoi

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Hanoi

Microcorruption (Embedded Security CTF): Sydney

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): Sydney

Microcorruption (Embedded Security CTF): New Orleans

CTF Writeups, Microcorruption May 18, 2025
Microcorruption (Embedded Security CTF): New Orleans

TUCTF “Danger Zone”: Python, Reversing, and Kenny Loggins

CTF Writeups Feb 25, 2020
TUCTF “Danger Zone”: Python, Reversing, and Kenny Loggins

TUCTF’s Ready Player One Challenges (hint: git is your friend)

CTF Writeups Feb 25, 2020
TUCTF’s Ready Player One Challenges (hint: git is your friend)

TUCTF Meets Clue

CTF Writeups Feb 25, 2020
TUCTF Meets Clue

CompTIA Security+: Public Key Infrastructure

Security+ Oct 1, 2025
CompTIA Security+: Public Key Infrastructure

CompTIA Security+: Wireless Security

Security+ Oct 1, 2025
CompTIA Security+: Wireless Security

CompTIA Security+: Cryptographic Algorithms

Security+ Oct 1, 2025
CompTIA Security+: Cryptographic Algorithms

CompTIA Security+: Cryptographic Concepts

Security+ Oct 1, 2025
CompTIA Security+: Cryptographic Concepts

CompTIA Security+: Data Security and Privacy Practices

Security+ Oct 1, 2025
CompTIA Security+: Data Security and Privacy Practices

CompTIA Security+: Digital Forensics

Security+ Oct 1, 2025
CompTIA Security+: Digital Forensics

CompTIA Security+: Incident Response, Disaster Recovery and Continuity of Operations

Security+ Oct 1, 2025
CompTIA Security+: Incident Response, Disaster Recovery and Continuity of Operations

CompTIA Security+: Risk Management and Business Impact Analysis

Security+ Oct 1, 2025
CompTIA Security+: Risk Management and Business Impact Analysis

CompTIA Security+: Policies, Plans and Procedures

Security+ Oct 1, 2025
CompTIA Security+: Policies, Plans and Procedures

CompTIA Security+: Identity and Access Management Controls

Security+ Oct 1, 2025
CompTIA Security+: Identity and Access Management Controls

CompTIA Security+: Identity and Access Services

Oct 1, 2025
CompTIA Security+: Identity and Access Services

CompTIA Security+: Identity, Access and Accounts

Security+ Oct 1, 2025
CompTIA Security+: Identity, Access and Accounts

CompTIA Security+: Physical Security Controls

Security+ Oct 1, 2025
CompTIA Security+: Physical Security Controls

CompTIA Security+: Resiliency and Automation Strategies

Security+ Oct 1, 2025
CompTIA Security+: Resiliency and Automation Strategies

CompTIA Security+: Cloud and Virtualization

Security+ Oct 1, 2025
CompTIA Security+: Cloud and Virtualization

CompTIA Security+: Application Development and Deployment

Security+ Oct 1, 2025
CompTIA Security+: Application Development and Deployment

CompTIA Security+: Embedded Systems

Security+ Oct 1, 2025
CompTIA Security+: Embedded Systems

CompTIA Security+: Secure Systems Design and Deployment

Security+ Oct 1, 2025
CompTIA Security+: Secure Systems Design and Deployment

CompTIA Security+: Architecture Frameworks and Secure Network Architecture

Security+ Oct 1, 2025
CompTIA Security+: Architecture Frameworks and Secure Network Architecture

CompTIA Security+: Implementing Secure Protocols

Security+ Oct 1, 2025
CompTIA Security+: Implementing Secure Protocols

CompTIA Security+: Mobile Devices

Security+ Oct 1, 2025
CompTIA Security+: Mobile Devices

CompTIA Security+: Troubleshooting Common Security Issues

Security+ Oct 1, 2025
CompTIA Security+: Troubleshooting Common Security Issues

CompTIA Security+: Security Tools and Technologies

Security+ Oct 1, 2025
CompTIA Security+: Security Tools and Technologies

CompTIA Security+: Network Components

Security+ Oct 1, 2025
CompTIA Security+: Network Components

CompTIA Security+: Vulnerabilities and Impacts

Security+ Oct 1, 2025
CompTIA Security+: Vulnerabilities and Impacts

CompTIA Security+: Vulnerability Scanning and Penetration Testing

Security+ Oct 1, 2025
CompTIA Security+: Vulnerability Scanning and Penetration Testing

CompTIA Security+: Threat Actors

Security+ Oct 1, 2025
CompTIA Security+: Threat Actors

CompTIA Security+: Cryptographic Attacks

Security+ Oct 1, 2025
CompTIA Security+: Cryptographic Attacks

CompTIA Security+: Wireless Attacks

Security+ Oct 1, 2025
CompTIA Security+: Wireless Attacks

CompTIA Security+: Application/Service Attacks

Security+ Oct 1, 2025
CompTIA Security+: Application/Service Attacks

CompTIA Security+: Social Engineering Attacks

Security+ Oct 1, 2025
CompTIA Security+: Social Engineering Attacks

CompTIA Security+: Malware and Indicators of Compromise

Security+ Oct 1, 2025
CompTIA Security+: Malware and Indicators of Compromise

Studying for the CompTIA Security+ Exam: What and Why

Security+ Oct 1, 2025
Studying for the CompTIA Security+ Exam: What and Why

Pwnable.kr: ‘input’ Walkthrough

CTF Writeups Feb 25, 2020
Pwnable.kr: ‘input’ Walkthrough

Pwnable.kr: ‘random’ Walkthrough

CTF Writeups Feb 25, 2020
Pwnable.kr: ‘random’ Walkthrough

Pwnable.kr: ‘passcode’ Walkthrough

CTF Writeups May 18, 2025
Pwnable.kr: ‘passcode’ Walkthrough

Pwnable.kr: ‘flag’ Walkthrough

CTF Writeups May 18, 2025
Pwnable.kr: ‘flag’ Walkthrough

Pwnable.kr: ‘bof’ Walkthrough

CTF Writeups May 18, 2025
Pwnable.kr: ‘bof’ Walkthrough

Pwnable.kr: ‘collision’ Walkthrough

CTF Writeups May 18, 2025
Pwnable.kr: ‘collision’ Walkthrough

Pwnable.kr: ‘fd’ Walkthrough

CTF Writeups Feb 25, 2020
Pwnable.kr: ‘fd’ Walkthrough

Reconnaissance: the What, Why and How of Information Gathering

Pen Testing Feb 25, 2020
Reconnaissance: the What, Why and How of Information Gathering

MetaGooFil: Scraping Google For File MetaData So You Don’t Have To

Pen Testing Feb 25, 2020
MetaGooFil: Scraping Google For File MetaData So You Don’t Have To

Extracting Info from DNS Servers

Pen Testing Feb 25, 2020
Extracting Info from DNS Servers

What is WHOIS, and How to Use It (Plus GDPR, of course)

Pen Testing Feb 25, 2020
What is WHOIS, and How to Use It (Plus GDPR, of course)

The Harvester: A Python Script for Finding Email Addresses

Pen Testing Oct 1, 2025
The Harvester: A Python Script for Finding Email Addresses

Google “Hacking” for Penetration Testers (DEFCON 13)

Pen Testing Oct 1, 2025
Google “Hacking” for Penetration Testers (DEFCON 13)

Learning “Google-Fu”: Google Directives for Penetration Testers

Pen Testing Oct 1, 2025
Learning “Google-Fu”: Google Directives for Penetration Testers

Website Copying and Offline Browsing with HTTrack

Pen Testing Oct 1, 2025
Website Copying and Offline Browsing with HTTrack

What is Penetration Testing?

Pen Testing Oct 1, 2025
What is Penetration Testing?

How HTTP Works: A Quick Primer

CS Foundation Feb 25, 2020
How HTTP Works: A Quick Primer

A Quick SHA Primer

Cryptography, CS Foundation Feb 25, 2020
A Quick SHA Primer

How TCP Handshakes Work

CS Foundation Jun 20, 2021
How TCP Handshakes Work

MAC Addresses

CS Foundation Jun 20, 2021
MAC Addresses

The OSI Model

CS Foundation Feb 25, 2020
The OSI Model

Diffie-Hellman, Explained

Cryptography Oct 1, 2025
Diffie-Hellman, Explained