3 min read
NewYear 2026 — exFill Writeup
A packet capture of an intrusion against a vsftpd 2.3.4 server. The attacker pops the famous smiley backdoor, lands a root shell, then exfiltrates a JPEG as base64 over a reverse shell. Reassemble the stream and the flag is painted inside the stolen image.
#CTF#Cybersecurity#Forensics