Written by
f1rst 9 min read The console behind the recruitment kit in part one ships onboarding material for its customers, increments a build constant and shares its code, its services and its configuration variables with a phishing operation documented in September 2023 as RedLungfish. This is what the capture record and the panel build support.
f1rst 13 min read 1 parts
Some writeup for a mobile challenge on Hack The Box Lab.
f1rst 76 min read 8 parts
Some writeup for a web challenge on Hack The Box Lab.
f1rst 16 min read Technical analysis of a live General Motors careers phishing deployment and the kit behind it: cloned brand pages, a collection form, a fake identity provider, and a Socket.IO console that lets an operator steer the victim. 245 captures across 108 registrable domains, with detection opportunities and indicators.
f1rst 7 min read Notes on writing a lightweight CTFd container plugin for a university CTF, including per-team flags and flag sharing detection.
f1rst 4 min read Reflections on solving SocratesPanel, the differences between CTFs and the real world, and how AI agents are changing the game for security researchers.
f1rst 4 min read My post-exam reflection of the CPTS certification from Hack The Box
f1rst 4 min read 
f1rst 25 min read 3 parts
Documenting my journey to enhance my blue team skills step by step.
f1rst 7 min read CEH Master Certification Review: Theory, Practical, and My Experience
f1rst 5 min read Hướng dẫn bảo vệ các metric endpoints của Prometheus bằng cách thêm authentication.
f1rst 4 min read Hướng dẫn cài đặt và tích hợp Grafana với Prometheus.
f1rst 8 min read Tổng quan về Prometheus và cách cài đặt cơ bản.
f1rst 6 min read Tiếp nối bài viết trước, hôm nay chúng ta sẽ cùng tìm hiểu về khải niệm Node và các loại Networking trong openstack
f1rst 5 min read Tổng quan khái niệm về Openstack.
f1rst 2 min read Hướng dẫn quản lý các host từ xa bằng Portainer Agent.
f1rst 5 min read Hướng dẫn cài đặt Portainer để quản lý Docker.
f1rst 6 min read Hướng dẫn cài đặt theme và email cho CTFd.
f1rst 6 min read Hướng dẫn cài đặt ZSH và Oh My Zsh.
f1rst 4 min read Bước đầu setup CTFd.
f1rst 3 min read A writeup for the Metadata checker challenge from BKCTF 2023.
f1rst 3 min read Writeup for the Web challenges of RITSEC CTF 2023.
f1rst 4 min read Writeup for The DEW challenge from Space Heroes CTF.
f1rst 4 min read Writeup for 2 challenges from ångstromCTF 2023.
f1rst 8 min read Writeups for 247CTF web challenges: trusted client, secured session, compare the pair, and a race condition in ACID flag bank.