A full-length offensive security walkthrough of Darkly, the 42 Network web-exploitation project — chaining IDOR, unrestricted file upload, stored XSS against a moderation bot, MD5 reset tokens, mass assignment, XXE-to-SSRF, and PocketBase privilege escalation into a complete authentication bypass, then auditing the remaining OWASP Top 10 weaknesses.

A deep-dive technical writeup and source code explanation of my automated Python exploit for Intigriti's Challenge 0726, breaking a polyglot system via JSON duplicate key parsing collisions.

An exhaustive technical narrative of solving the Intigriti LeakyJar CTF challenge — analyzing SameSite=None browser cookie boundaries and forging authenticated cross-site requests to compromise administrative vaults.

Detailed step-by-step writeups and source code walkthroughs for my solutions to the Local CTF at 1337 School (42 Network), covering Web and Misc challenges.

An exhaustive architectural deep-dive into engineering an RFC 2812 compliant Internet Relay Chat server in raw C++98 at 1337 School (42 Network) — exploring non-blocking sockets, TCP stream buffering, poll() multiplexing, memory safety, and offensive security hardening.

An exhaustive architectural deep-dive into engineering an enterprise-grade, secure multi-container web infrastructure from scratch using Docker, Docker Compose, Nginx TLS, PHP-FPM, and MariaDB at 1337 School (42 Network).

An inside recap of the 3rd edition of Cyber Odyssey at 1337 Khouribga—Morocco's premier cybersecurity championship by Akasec, uniting CTF warriors, bug hunters, and security leaders.