f1rst the potato tech bloghttps://blog.phannhat.com/https://blog.phannhat.com/blog/tech/huntpanel-origins/https://blog.phannhat.com/blog/tech/huntpanel-origins/The console behind the recruitment kit in part one ships onboarding material for its customers, increments a build constant and shares its code, its services and its configuration variables with a phishing operation documented in September 2023 as RedLungfish. This is what the capture record and the panel build support.Mon, 12 Oct 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/htb-mobile-challenge-writeup/https://blog.phannhat.com/blog/tech/htb-mobile-challenge-writeup/Some writeup for a mobile challenge on Hack The Box Lab.Sat, 10 Oct 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/htb-web-challenge-writeup/https://blog.phannhat.com/blog/tech/htb-web-challenge-writeup/Some writeup for a web challenge on Hack The Box Lab.Fri, 09 Oct 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/huntpanel-recruitment-kit/https://blog.phannhat.com/blog/tech/huntpanel-recruitment-kit/Technical analysis of a live General Motors careers phishing deployment and the kit behind it: cloned brand pages, a collection form, a fake identity provider, and a Socket.IO console that lets an operator steer the victim. 245 captures across 108 registrable domains, with detection opportunities and indicators.Wed, 07 Oct 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/ctfd-docker-containers-plugin/https://blog.phannhat.com/blog/tech/ctfd-docker-containers-plugin/Notes on writing a lightweight CTFd container plugin for a university CTF, including per-team flags and flag sharing detection.Sun, 04 Oct 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/from-ctf-flags-to-real-world/https://blog.phannhat.com/blog/tech/from-ctf-flags-to-real-world/Reflections on solving SocratesPanel, the differences between CTFs and the real world, and how AI agents are changing the game for security researchers.Thu, 07 May 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/htb-cpts-review/https://blog.phannhat.com/blog/tech/htb-cpts-review/My post-exam reflection of the CPTS certification from Hack The BoxMon, 26 Jan 2026 00:00:00 GMThttps://blog.phannhat.com/blog/tech/network-pivoting-with-ligolo/https://blog.phannhat.com/blog/tech/network-pivoting-with-ligolo/Tue, 16 Dec 2025 00:00:00 GMThttps://blog.phannhat.com/blog/tech/building-my-blue-team-skills-from-the-ground-up/https://blog.phannhat.com/blog/tech/building-my-blue-team-skills-from-the-ground-up/Documenting my journey to enhance my blue team skills step by step.Tue, 14 Oct 2025 00:00:00 GMThttps://blog.phannhat.com/blog/tech/what-i-learned-after-passing-the-ceh-master-certification/https://blog.phannhat.com/blog/tech/what-i-learned-after-passing-the-ceh-master-certification/CEH Master Certification Review: Theory, Practical, and My ExperienceMon, 15 Sep 2025 00:00:00 GMThttps://blog.phannhat.com/blog/tech/prometheus-authentication-cho-cac-endpoints/https://blog.phannhat.com/blog/tech/prometheus-authentication-cho-cac-endpoints/Hướng dẫn bảo vệ các metric endpoints của Prometheus bằng cách thêm authentication.Sat, 30 Nov 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/truc-quan-hoa-du-lieu-voi-grafana/https://blog.phannhat.com/blog/tech/truc-quan-hoa-du-lieu-voi-grafana/Hướng dẫn cài đặt và tích hợp Grafana với Prometheus.Sat, 30 Nov 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/prometheus-cong-cu-giam-sat-manh-me-va-de-mo-rong/https://blog.phannhat.com/blog/tech/prometheus-cong-cu-giam-sat-manh-me-va-de-mo-rong/Tổng quan về Prometheus và cách cài đặt cơ bản.Fri, 29 Nov 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/openstack-2-node-network-trong-openstack/https://blog.phannhat.com/blog/tech/openstack-2-node-network-trong-openstack/Tiếp nối bài viết trước, hôm nay chúng ta sẽ cùng tìm hiểu về khải niệm Node và các loại Networking trong openstackThu, 28 Nov 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/openstack-1-tong-quan-khai-niem/https://blog.phannhat.com/blog/tech/openstack-1-tong-quan-khai-niem/Tổng quan khái niệm về Openstack.Tue, 26 Nov 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/quan-ly-cac-host-tu-xa-bang-portainer-agent/https://blog.phannhat.com/blog/tech/quan-ly-cac-host-tu-xa-bang-portainer-agent/Hướng dẫn quản lý các host từ xa bằng Portainer Agent.Thu, 19 Sep 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/quan-ly-docker-don-gian-voi-portainer/https://blog.phannhat.com/blog/tech/quan-ly-docker-don-gian-voi-portainer/Hướng dẫn cài đặt Portainer để quản lý Docker.Wed, 18 Sep 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/ctfd-2-theme-va-email/https://blog.phannhat.com/blog/tech/ctfd-2-theme-va-email/Hướng dẫn cài đặt theme và email cho CTFd.Fri, 08 Mar 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/lam-quen-cli-de-dang-voi-zsh/https://blog.phannhat.com/blog/tech/lam-quen-cli-de-dang-voi-zsh/Hướng dẫn cài đặt ZSH và Oh My Zsh.Sat, 03 Feb 2024 00:00:00 GMThttps://blog.phannhat.com/blog/tech/ctfd-1-buoc-dau-setup/https://blog.phannhat.com/blog/tech/ctfd-1-buoc-dau-setup/Bước đầu setup CTFd.Sat, 04 Nov 2023 00:00:00 GMThttps://blog.phannhat.com/blog/tech/bkctf-2023-metadata-checker/https://blog.phannhat.com/blog/tech/bkctf-2023-metadata-checker/A writeup for the Metadata checker challenge from BKCTF 2023.Fri, 18 Aug 2023 00:00:00 GMThttps://blog.phannhat.com/blog/tech/writeup-ritsec-ctf-2023/https://blog.phannhat.com/blog/tech/writeup-ritsec-ctf-2023/Writeup for the Web challenges of RITSEC CTF 2023.Fri, 18 Aug 2023 00:00:00 GMThttps://blog.phannhat.com/blog/tech/writeup-space-heroes-ctf/https://blog.phannhat.com/blog/tech/writeup-space-heroes-ctf/Writeup for The DEW challenge from Space Heroes CTF.Fri, 18 Aug 2023 00:00:00 GMThttps://blog.phannhat.com/blog/tech/writeup-angstromctf-2023/https://blog.phannhat.com/blog/tech/writeup-angstromctf-2023/Writeup for 2 challenges from ångstromCTF 2023.Wed, 26 Apr 2023 00:00:00 GMThttps://blog.phannhat.com/blog/tech/writeup-web-247ctf/https://blog.phannhat.com/blog/tech/writeup-web-247ctf/Writeups for 247CTF web challenges: trusted client, secured session, compare the pair, and a race condition in ACID flag bank.Sat, 18 Feb 2023 00:00:00 GMT