ABOUT ME ======== Hi, I'm Gaurav (ecst4sy) - cybersecurity student, CTF player, and builder. I like taking systems apart to see why they break. Digital forensics, reverse engineering, and binary exploitation get most of my attention: reconstructing an incident from a packet capture, tracing a corrupted artifact back to what actually happened, or finding the one bug in a binary that turns into a working exploit. Cybersecurity student, CNSP-certified, and competing with team v1olet across HTB, BrunnerCTF, and independent CTFs. currently: breaking things @ Softwarica College -------------------------------- RECENT CTF RESULTS -------------------------------- - Netanix CTF (solo) - Rank #2 · 57,619 pts [LIVE] - PwnSec CTF 2026 (v1olet) - Rank #1 · Human Bracket - HTB Holmes CTF 2026 (v1olet) - Rank #97 - Sunshine CTF 2026 (v1olet) - Rank #14 - BrunnerCTF 2026 (v1olet) - 2nd / 1,103 teams - 0xV01D CTF (v1olet) - 2nd place - Cyber Apocalypse CTF 2026 (HTB) (v1olet) - Team rank #105 · 136/136 solved - Athena CTF 2026 (solo) - Rank #39 · 24-hour jeopardy -------------------------------- SKILLS -------------------------------- OWASP Top 10, Penetration Testing, Network Security, Web Application Security, Red Teaming, Binary Exploitation (PWN), Reverse Engineering, Digital Forensics, Cryptography, Incident Response, Solidity, Foundry, Python, Machine Learning "Giving up is not in the blood, sir. — Nims Dai Purja"
$ ls ~/writeups
2026_tux_kart.posts
Posts
Medium reversing challenge peeling a .NET dropper to reach a rebuilt SuperTuxKart binary, then recovering an HMAC-SHA256 + XOR-encoded flag fully offline from static .rdata constants.
Open →
2026_bears.posts
Posts
BrunnerCTF misc/forensics challenge extracting data from a mascot image (embedded metadata, not LSB stego).
Open →
2026_company_discount.posts
Posts
BrunnerCTF forensics/malware challenge analyzing a defanged .hta file delivering a company discount email scam.
Open →
2026_forensic_invoice.posts
Posts
BrunnerCTF forensics/malware challenge analyzing a macro-enabled Office document with a malicious VBA payload.
Open →
2026_free_play.posts
Posts
BrunnerCTF forensics challenge analyzing a 2009-era game save file and screenshot to recover a hidden flag.
Open →
2026_missing_recipe.posts
Posts
BrunnerCTF forensics/network DFIR challenge reconstructing an attack from a ~40MB PCAP to recover a hidden flag.
Open →
2026_welcome_aboard.posts
Posts
BrunnerCTF web challenge involving request smuggling through an employee wiki with multiple infrastructure layers.
Open →
2026_forgotten_incident.posts
Posts
Hard forensics/web challenge following a URL-encoded path traversal (CVE-2021-41773 pattern) through synthetic evidence artifacts to the hidden forensic store.
Open →
2026_labyrinth.posts
Posts
Reverse engineering challenge inverting a 4-chunk 16-round Feistel network with AES S-boxes and an anti-debug ptrace key-poison.
Open →
2026_whitebox.posts
Posts
Hard reversing challenge inverting a Chow-style white-box AES (9 table rounds + final byte encoding) to recover the secret key-free.
Open →
2026_hackers_vault.posts
Posts
Web exploitation challenge abusing a race condition in the token refresh flow to bypass a role check and retrieve the flag.
Open →
2026_fireflow.posts
Posts
Medium HTB Linux box chaining Langflow RCE (CVE-2026-33017), password reuse, MCP JWT alg:none forgery, and Kubernetes nodes/proxy to root.
Open →
No signal found. Try a broader search or clear the active tags.
Loading résumé…
Enter a domain and hit Lookup.
Select a track
0:00 / --:--
8 flags are hidden around this site, in the format ecst4sy{...}. Find them and submit them here (or with submit in the Terminal).
0 / 8
🏆 All flags captured! Screenshot this and tag me, I'd love to know.