WordPress

Posts tagged "WordPress"

2 posts found

5 min read

KnightCTF 2026 — Post_Exploitation Writeup

A noisy capture with one loud port scan hiding the real story. Filtering the noise exposes a WordPress Social Warfare exploit, the HTTP port the attacker served the payload from, and the reverse shell that called home — exactly the two ports the flag wants.

#CTF#Cybersecurity#Network

10 min read

SekaiCTF 2026 — Filtered Reality Writeup

A WordPress bureau where a subscriber spoofs an admin screen to leak a nonce, then a five-stage client-to-server chain ends in a php://filter RCE and a keeper hash length-extension to read the flag.

#CTF#Cybersecurity#Web