Setting up a stable Arch-based Penetration Testing environment

Intro This is actually my thought process of making this script https://github.com/Flock137/EOSxBlackArch, where I put the BlackArch repo on top of EndeavourOS for a quick Arch pentest environment, since BlackArch is a bit of a hassle for installing quickly. I hope it would help you in the case you wanna make an automation script yourself someday. First and foremost Install EndeavourOS. We will port our BlackArch repo into right after the former’s installation finish. ...

December 1, 2025

ai_gon3_r0ug3 Writeup

Introduction This is a Private CTF organized under the collaboration between HackerOne and HackTheBox that focus only on the AI category. Re-car AI You have been tasked with pentesting the largest used car listing website in your area. They have recently implemented an AI chatbot in their listing page to help users with common questions. The website’s policy is not to disclose the seller’s information unless the user is logged in. Can you find a way to bypass the filters and reveal the seller’s phone number by asking the chatbot? Flag format: HTB{xxx-xxxx-xxx} ...

September 22, 2025

Girls-in-CTF Writeup - Forensics & AI

Introduction To encourage and celebrate women/girls in cyber security, Re:Hack has organized this girls-only-CTF. As a woman, I really appreciate this effort and it feels incredibly inspiring. This is the first time that myself see so many girls and women gather in one place and all are incredibly passionate about this very technical field. So, I would like to give a very special thank-you to the organizers and all the challenge writers involved to make this sort of event possible. ...

September 18, 2025

ScriptCTF Writeup - Forensics

pdf (Author: Connor Chang) Description: so sad cause no flag in pdf The challenge attachment can be found here: https://github.com/scriptCTF/scriptCTF2025-OfficialWriteups/blob/main/Forensics/pdf/attachments/challenge.pdf For this challenge, you can open up Firefox to view the hint in the given PDF, but for this approach, we won’t need to use it. All we have to do is using binwalk binwalk -e challenge.pdf In the extracted folder, click on (or cat) the text file (11B or something similar), the flag is in there ...

September 12, 2025

How did I repair an (Arch) Linux bootloader twice

Introduction: Updating BIOS, got Linux overwritten After I updated my BIOS, it happened to auto turn on secure boot, bitlocker again and overwrite the bootloader on my Linux partition on a separated disk. Not to mention, I no longer see my systemd bootloader screen. Disable bitlocker key To disable bitlocker key (not decrypt the whole drive), so the windows partition won’t ask you bitlocker password over and over again when you dual-boot: ...

September 11, 2025

Recover corrupted USB in Linux terminal (required complete data wipe)

Step 1 lsblk The USB would likely to be something like sda or sdb (the same name with number is a partition). The easiest way to figure out which is your thumb drive is the size. Step 2 If the system mount any of your partition, you need to unmount them first before wiping. # Replace sdX1 with your actual partition identifier (e.g., sdb1) sudo umount /dev/sdX1 Step 3 Use wipefs command to completely erase all partition tables and filesystem signatures from the drive. ...

September 11, 2025

Revive FlareVM Network Connection (VirtualBox)

Introduction Normally, installing a FlareVM won’t mutate your network connection. However, for some reason, I wasn’t able to access network inside the VM. This could have caused by one or a couple of reasons: Non-fatal errors occured during installation (I was supposed to look at the screen during all process, but it took 6h to finish…) The recovery function of Windows got forced shut down to fulfill installation prerequisites, so it can not intervene and autofix the network issues A driver “Other” was spotted to be missing after FlareVM completely finish its installation VirtualBox network setting walkthrough You may like to switch to either NAT or Bridged Adapter. In the Adapter type, choose something along the line of “Intel… Desktop”, or if you don’t know what to choose, just leave the default option. ...

September 11, 2025

Merging multiple singular .ics files into one in Linux

Step 1: Gather your individual .ics files in a folder. Open the terminal in the said folder. Type this in your console. # Comhbine all .ics to a new text file cat *.ics > temp.txt Step 2: If you check with cat temp.txt you can see there is this weird string that you need to get rid off: END:VCALENDARBEGIN:VCALENDAR. Use cat temp.txt | grep -v DARBEG > temp1.txt Step 3: For my case, I also need to: ...

September 3, 2025