# ctfwriteup

## ctfwriteup

- [/home/ret2basic.eth](https://ret2basic.gitbook.io/ctfwriteup/home-ret2basic.eth.md)
- [Web3 Security Notes](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/web3-security-notes.md)
- [Damn Vulnerable DeFi V4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4.md)
- [Unstoppable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/unstoppable.md)
- [Naive Receiver](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/naive-receiver.md)
- [Truster](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/truster.md)
- [Side Entrance](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/side-entrance.md)
- [The Rewarder](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/the-rewarder.md)
- [Selfie](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/selfie.md)
- [Compromised](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/compromised.md)
- [Puppet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet.md)
- [Puppet V2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v2.md)
- [Free Rider](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/free-rider.md)
- [Backdoor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/backdoor.md)
- [Climber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/climber.md)
- [Wallet Mining (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/wallet-mining-todo.md)
- [Puppet V3  (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v3-todo.md)
- [ABI Smuggling (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/abi-smuggling-todo.md)
- [Milotruck EVM Challs](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs.md)
- [1. Greyhats Dollar](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/1.-greyhats-dollar.md): self transfer double spend
- [2. Escrow](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/2.-escrow.md): ABI encoding asymmetry
- [3. Simple AMM Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/3.-simple-amm-vault.md)
- [4. Voting Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/4.-voting-vault.md)
- [5. Meta Staking](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/5.-meta-staking.md): ERC2771Context + Multicall bug
- [6. Gnosis Unsafe](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/6.-gnosis-unsafe.md): ecrecover address(0) bug + ABI-reencoding bug for solidity <0.8.16
- [7. Rational](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/7.-rational.md): rational-math ZERO representation
- [8. Launchpad](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/8.-launchpad.md)
- [9. Locker](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/9.-locker.md)
- [10. Race](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/10.-race.md)
- [Remedy CTF 2025 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo.md)
- [Diamond Heist](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/diamond-heist.md)
- [R vs Q](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/r-vs-q.md)
- [Rich Man's Bet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/rich-mans-bet.md)
- [Casino Avengers](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/casino-avengers.md)
- [Frozen Voting](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/frozen-voting.md)
- [Lockdown](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/lockdown.md)
- [Proof of Thought](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/proof-of-thought.md)
- [Maybe it's unnecessary?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/maybe-its-unnecessary.md)
- [Et tu, Permit2?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/et-tu-permit2.md)
- [Not a very LUCKY TOKEN](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/not-a-very-lucky-token.md)
- [risc4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/risc4.md)
- [HealthCheck as a Service](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/healthcheck-as-a-service.md)
- [Restricted Proxy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/restricted-proxy.md)
- [Unstable Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/unstable-pool.md)
- [Opaze Whisperer](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/opaze-whisperer.md)
- ["memorable" onlyOwner](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/memorable-onlyowner.md)
- [World of Memecraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/world-of-memecraft.md)
- [Copy/Paste/Deploy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/copy-paste-deploy.md)
- [Peer-to-peer-to-me](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/peer-to-peer-to-me.md)
- [Joe's Lending Mirage](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/joes-lending-mirage.md)
- [Tokemak](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/tokemak.md)
- [OFAC Executive Order 13337](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/ofac-executive-order-13337.md)
- [Paradigm CTF 2023 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo.md)
- [Oven](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/oven.md)
- [Dragon Tyrant](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/dragon-tyrant.md)
- [Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut.md)
- [Hello Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/hello-ethernaut.md): intro
- [Fallback](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallback.md): fallback() and receive()
- [Fallout](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallout.md): backdoor
- [Coin Flip](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/coin-flip.md): randomness
- [Telephone](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/telephone.md): tx.origin
- [Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/token.md): overflow and underflow
- [Delegation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/delegation.md): delegatecall
- [Force](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/force.md): selfdestruct
- [Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/vault.md): private state variable
- [King](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/king.md): king of the ether
- [Re-entrancy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/re-entrancy.md): reentrancy attack
- [Elevator](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/elevator.md): calling other contract
- [Privacy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/privacy.md): storage
- [Gatekeeper One](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-one.md): gasleft()
- [Gatekeeper Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-two.md): EOA check
- [Naught Coin](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/naught-coin.md): ERC20
- [Preservation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/preservation.md): delegatecall and storage
- [Recovery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/recovery.md): deterministic address
- [MagicNumber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/magicnumber.md): EVM opcodes
- [Alien Codex](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/alien-codex.md): dynamic array
- [Denial](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/denial.md): DoS
- [Shop](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/shop.md): view functions
- [DEX](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex.md): integer division precision loss
- [DEX Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex-two.md): external ERC20 contract
- [Puzzle Wallet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/puzzle-wallet.md): proxy contract
- [Motorbike](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/motorbike.md)
- [DoubleEntryPoint](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/doubleentrypoint.md)
- [Good Samaritan](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/good-samaritan.md): call chain
- [Gatekeeper Three](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-three.md)
- [Switch](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/switch.md)
- [Flashbots MEV-Share CTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/flashbots-mev-share-ctf.md)
- [Capture the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether.md)
- [Lotteries](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/lotteries.md)
- [Math](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/math.md)
- [Miscellaneous](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/miscellaneous.md)
- [EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles.md)
- [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-1.md): CALLVALUE, JUMP, JUMPDEST
- [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-2.md): CODESIZE, SUB
- [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-3.md): CALLDATASIZE
- [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-4.md): XOR
- [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-5.md): DUP, MUL, PUSH, EQ, JUMPI
- [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-6.md): CALLDATALOAD
- [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-7.md): CALLDATACOPY, CREATE
- [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-8.md): GAS, CALL
- [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-9.md)
- [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-10.md)
- [More EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles.md)
- [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-1.md): PC
- [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-2.md): CALL, RETURNDATASIZE
- [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-3.md): DELEGATECALL
- [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-4.md): ADDRESS, BALANCE
- [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-5.md): MSIZE
- [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-6.md): overflow
- [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-7.md): gas cost
- [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-8.md)
- [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-9.md)
- [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-10.md)
- [QuillCTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf.md)
- [MetaToken](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/metatoken.md)
- [Temporary Variable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/temporary-variable.md)
- [KeyCraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/keycraft.md)
- [Lottery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/lottery.md)
- [Private Club](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/private-club.md)
- [Voting Machine](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/voting-machine.md)
- [Predictable NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/predictable-nft.md)
- [Invest Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/invest-pool.md)
- [PseudoRandom](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pseudorandom.md)
- [Gold NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gold-nft.md)
- [Slot Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/slot-puzzle.md)
- [Moloch's Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/molochs-vault.md)
- [Donate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/donate.md)
- [WETH-11](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth-11.md)
- [Panda Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/panda-token.md)
- [Gate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gate.md)
- [WETH10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth10.md)
- [Pelusa](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pelusa.md)
- [True XOR](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/true-xor.md)
- [Collatz Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/collatz-puzzle.md)
- [D31eg4t3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/d31eg4t3.md)
- [Safe NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/safe-nft.md)
- [VIP Bank](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/vip-bank.md)
- [Confidential Hash](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/confidential-hash.md)
- [Road Closed](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/road-closed.md)
- [unhacked](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked.md)
- [reaper](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked/reaper.md)
- [Secureum AMAZEX DSS Paris](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris.md)
- [Operation magic redemption](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-magic-redemption.md)
- [Mission Modern WETH: Rescue the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/mission-modern-weth-rescue-the-ether.md)
- [LendEx pool hack](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/lendex-pool-hack.md)
- [Operation Rescue POSI Token!](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-rescue-posi-token.md)
- [Balloon Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/balloon-vault.md)
- [Safe Yield?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/safe-yield.md)
- [Crystal DAO](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/crystal-dao.md)
- [Liquidatoooor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/liquidatoooor.md)
- [Uniswap V2 Puzzles](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles.md)
- [HelloWorld](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/helloworld.md)
- [AddLiquid](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/addliquid.md)
- [AddLiquidWithRouter](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/addliquidwithrouter.md)
- [BurnLiquid](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/burnliquid.md)
- [BurnLiquidWithRouter](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/burnliquidwithrouter.md)
- [SimpleSwap](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/simpleswap.md)
- [SimpleSwapWithRouter](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/simpleswapwithrouter.md)
- [SandwichSwap](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/sandwichswap.md)
- [MyMevBot](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/mymevbot.md)
- [SyncAndSkim](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/syncandskim.md)
- [ExactSwap](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/exactswap.md)
- [ExactSwapWithRouter](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/exactswapwithrouter.md)
- [MultiHop](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/multihop.md)
- [Twap](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/uniswap-v2-puzzles/twap.md)
- [Yul Puzzles](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles.md)
- [01 - ReturnBool](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/01-returnbool.md)
- [02 - SimpleRevert](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/02-simplerevert.md)
- [03 - Return42](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/03-return42.md)
- [04 - RevertWithError](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/04-revertwitherror.md)
- [05 - RevertWithSelectorPlusArgs](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/05-revertwithselectorplusargs.md)
- [06 - RevertWithPanic](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/yul-puzzles/06-revertwithpanic.md)
- [Huff Puzzles](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/huff-puzzles.md)
- [Zero Knowledge Puzzles](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/zero-knowledge-puzzles.md)
- [Solidity Riddles](https://ret2basic.gitbook.io/ctfwriteup/rareskills-puzzles/solidity-riddles.md)
- [Pwn Adventure 3: Pwnie Island](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island.md)
- [Prep: Speed Hack](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/prep-speed-hack.md)
- [Prep: Infinite Health and Mana (Offline)](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/prep-infinite-health-and-mana-offline.md)
- [Prep: Network Protocol and LiveLogger](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/prep-network-protocol-and-livelogger.md)
- [Prep: IDA Pro, GameLogic, and AI-Assisted Reversing](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/prep-ida-pro-gamelogic-and-ai-assisted-reversing.md)
- [Chall 1: Until the Cows Come Home](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-1-until-the-cows-come-home.md)
- [Chall 2: Overachiver](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-2-overachiver.md)
- [Chall 3: Unbearable Revenge](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-3-unbearable-revenge.md)
- [Chall 4: Egg Hunter](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-4-egg-hunter.md)
- [Chall 5: Fire and Ice](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-5-fire-and-ice.md)
- [Chall 6: Blocky's Revenge](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-6-blockys-revenge.md)
- [Chall 7: Pirate's Treasure](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/chall-7-pirates-treasure.md)
- [Extra: Fly Hack](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/pwn-adventure-3-pwnie-island/extra-fly-hack.md)
- [Cheat Engine Tutorial](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial.md)
- [Step 1: Setup](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-1-setup.md)
- [Step 2: Scan for "Exact Value"](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-2-scan-for-exact-value.md)
- [Step 3: Scan for "Unknown initial value"](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-3-scan-for-unknown-initial-value.md)
- [Step 4: Scan for float and double](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-4-scan-for-float-and-double.md)
- [Step 5: Replace instruction](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-5-replace-instruction.md)
- [Step 6: Pointer scanning](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-6-pointer-scanning.md)
- [Step 7: Code injection](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-7-code-injection.md)
- [Step 8: Multilevel pointers](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-8-multilevel-pointers.md)
- [Step 9: Shared code](https://ret2basic.gitbook.io/ctfwriteup/game-hacking/cheat-engine-tutorial/step-9-shared-code.md)
- [Grey Cat CTF 2024 (web challs)](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/grey-cat-ctf-2024-web-challs.md)
- [pwn.college](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college.md): {"author": \["ret2basic"]}
- [Introduction](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/introduction.md)
- [What is Computer Systems Security?](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/introduction/what-is-computer-systems-security.md): A chain is only as strong as its weakest link.
- [Program Interaction](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-interaction.md)
- [Linux Command Line](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-interaction/linux-command-line.md)
- [embryoio](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-interaction/embryoio.md)
- [Program Misuse](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-misuse.md)
- [Privilege Escalation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-misuse/privilege-escalation.md)
- [Mitigations](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-misuse/mitigations.md)
- [babysuid](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/program-misuse/babysuid.md)
- [Assembly Refresher](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/assembly-refresher.md)
- [x86 Assembly](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/assembly-refresher/x86-assembly.md)
- [embryoasm](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/assembly-refresher/embryoasm.md)
- [Shellcoding](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/shellcoding.md)
- [Introduction](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/shellcoding/introduction.md)
- [Common Challenges](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/shellcoding/common-challenges.md)
- [Data Execution Prevention](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/shellcoding/data-execution-prevention.md)
- [babyshell](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/shellcoding/babyshell.md)
- [Sandboxing](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/sandboxing.md)
- [chroot](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/sandboxing/chroot.md)
- [seccomp](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/sandboxing/seccomp.md)
- [Escaping seccomp](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/sandboxing/escaping-seccomp.md)
- [babyjail](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/sandboxing/babyjail.md)
- [Debugging Refresher](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/debugging-refresher.md)
- [x86 Assembly](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/debugging-refresher/x86-assembly.md)
- [embryogdb](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/debugging-refresher/embryogdb.md)
- [Binary Reverse Engineering](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering.md)
- [Functions and Frames](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/functions-and-frames.md)
- [Data Access](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/data-access.md)
- [Static Tools](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/static-tools.md)
- [Dynamic Tools](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/dynamic-tools.md)
- [Real-world Applications](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/real-world-applications.md)
- [babyrev](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/binary-reverse-engineering/babyrev.md)
- [Memory Errors](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors.md)
- [High-Level Problems](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/high-level-problems.md)
- [Smashing the Stack](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/smashing-the-stack.md)
- [Causes of Corruption](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/causes-of-corruption.md)
- [Canary](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/canary.md)
- [ASLR](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/aslr.md)
- [Causes of Disclosure](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/causes-of-disclosure.md)
- [babymem](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/memory-errors/babymem.md)
- [Exploitation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation.md)
- [Introduction](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation/introduction.md)
- [Hijacking to Shellcode](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation/hijacking-to-shellcode.md)
- [Side Effects](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation/side-effects.md)
- [JIT Spray](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation/jit-spray.md)
- [toddler1](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/exploitation/toddler1.md)
- [Return Oriented Programming](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/return-oriented-programming.md)
- [Binary Lego](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/return-oriented-programming/binary-lego.md)
- [Techniques](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/return-oriented-programming/techniques.md)
- [Complications](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/return-oriented-programming/complications.md)
- [babyrop](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/return-oriented-programming/babyrop.md)
- [Dynamic Allocator Misuse](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse.md)
- [What is the Heap?](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/what-is-the-heap.md)
- [Dangers of the Heap](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/dangers-of-the-heap.md)
- [tcache](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/tcache.md)
- [Chunks and Metadata](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/chunks-and-metadata.md)
- [Metadata Corruption](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/metadata-corruption.md)
- [babyheap](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/dynamic-allocator-misuse/babyheap.md)
- [Race Conditions](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/race-conditions.md)
- [Introduction](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/race-conditions/introduction.md)
- [Races in the Filesystem](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/race-conditions/races-in-the-filesystem.md)
- [babyrace](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/race-conditions/babyrace.md)
- [Kernel Security](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/kernel-security.md)
- [Environment Setup](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/kernel-security/environment-setup.md)
- [Kernel Modules](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/kernel-security/kernel-modules.md)
- [Privilege Escalation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/kernel-security/privilege-escalation.md)
- [babykernel](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/kernel-security/babykernel.md)
- [Advanced Exploitation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/advanced-exploitation.md)
- [toddler2](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwn.college/advanced-exploitation/toddler2.md)
- [pwnable.kr](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr.md): {"author": \["ret2basic"]}
- [fd](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/fd.md): {"author": \["ret2basic"]}
- [collision](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/collision.md): {"author": \["ret2basic"]}
- [bof](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/bof.md): {"author": \["ret2basic"]}
- [flag](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/flag.md): {"author": \["ret2basic"]}
- [passcode](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/passcode.md): {"author": \["ret2basic"]}
- [random](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/random.md): {"author": \["ret2basic"]}
- [input](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/input.md): {"author": \["ret2basic"]}
- [leg](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/leg.md): {"author": \["ret2basic"]}
- [mistake](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/mistake.md): {"author": \["ret2basic"]}
- [shellshock](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/shellshock.md): {"author": \["ret2basic"]}
- [coin1](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/coin1.md): {"author": \["ret2basic"]}
- [blackjack](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/blackjack.md): {"author": \["ret2basic"]}
- [lotto](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/lotto.md): {"author": \["ret2basic"]}
- [cmd1](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/cmd1.md): {"author": \["ret2basic"]}
- [cmd2](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/cmd2.md): {"author": \["ret2basic"]}
- [uaf](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/uaf.md): {"author": \["ret2basic"]}
- [memcpy](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/memcpy.md): {"author": \["ret2basic"]}
- [asm](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/asm.md): {"author": \["ret2basic"]}
- [unlink](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/unlink.md): {"author": \["ret2basic"]}
- [blukat](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/blukat.md): {"author": \["ret2basic"]}
- [horcruxes](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/pwnable.kr/horcruxes.md): {"author": \["ret2basic"]}
- [ROP Emporium](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium.md)
- [ret2win](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium/ret2win.md)
- [split](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium/split.md)
- [callme](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium/callme.md)
- [write4](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium/write4.md)
- [pivot](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/rop-emporium/pivot.md)
- [Jarvis OJ Pwn Xman Series](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/jarvis-oj-pwn-xman-series.md)
- [Jarvis OJ Crypto RSA Series](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/jarvis-oj-crypto-rsa-series.md)
- [picoMini by redpwn](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn.md)
- [Binary Exploitation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn/binary-exploitation.md): {"authors": \["ret2basic"]}
- [Reverse Engineering](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn/reverse-engineering.md): {"authors": \["ret2basic"]}
- [Cryptography](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn/cryptography.md): {"authors": \["ret2basic"]}
- [Web Exploitation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn/web-exploitation.md): {"authors": \["ret2basic"]}
- [Forensics](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picomini-by-redpwn/forensics.md): {"authors": \["ret2basic"]}
- [picoCTF 2021](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picoctf-2021.md): {"participants" : \["ret2basic", "y4y"]}
- [Reverse Engineering](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picoctf-2021/picoctf-2021-reverse-engineering.md): {"author": \["ret2basic"]}
- [Web Exploitation](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picoctf-2021/picoctf-2021-web-exploitation.md): {"authors": \["y4y", "ret2basic"]}
- [Forensics](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picoctf-2021/forensics.md)
- [picoCTF 2020 Mini-Competition](https://ret2basic.gitbook.io/ctfwriteup/web2-ctf/picoctf-2020-mini-competition.md): {"author" : \["ret2basic"]}
- [vulnlab](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab.md)
- [Active Directory Chains](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains.md)
- [Trusted (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains/trusted-easy.md)
- [Hybrid (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains/hybrid-easy.md)
- [Lustrous (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains/lustrous-medium.md)
- [Reflection (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains/reflection-medium.md)
- [Intercept (Hard)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/active-directory-chains/intercept-hard.md)
- [Red Team Labs](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/red-team-labs.md)
- [Wutai (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/red-team-labs/wutai-medium.md)
- [Shinra (Hard)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/vulnlab/red-team-labs/shinra-hard.md)
- [Hack The Box](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box.md)
- [AD](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad.md)
- [Intelligence](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/intelligence.md)
- [Pivotapi](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/pivotapi.md)
- [Sharp](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/sharp.md)
- [Monteverde](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/monteverde.md)
- [Resolute](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/resolute.md)
- [Endgame: P.O.O.](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/endgame-p.o.o..md)
- [Forest](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/forest.md)
- [Sauna](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/sauna.md): kerbrute, ASREProast, DCSync
- [Active](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/active.md): SMB info leak, GPP, Kerberoast
- [Blackfield](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/ad/blackfield.md)
- [Linux](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/linux.md)
- [Safe (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/linux/safe-easy.md)
- [Delivery (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/linux/delivery-easy.md)
- [TheNotebook (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/linux/thenotebook-medium.md)
- [Brainfuck (Insane)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/hack-the-box/linux/brainfuck-insane.md)
- [TCM Windows Privilege Escalation Course](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-windows-privilege-escalation-course.md)
- [Hack The Box - Chatterbox (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-windows-privilege-escalation-course/hack-the-box-chatterbox-medium.md)
- [Hack The Box - SecNotes (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-windows-privilege-escalation-course/hack-the-box-secnotes-medium.md)
- [TCM Linux Privilege Escalation Course](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course.md)
- [TryHackMe - Simple CTF (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-simple-ctf-easy.md)
- [TryHackMe - Vulnversity (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-vulnversity-easy.md)
- [TryHackMe - CMesS (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-cmess-medium.md)
- [TryHackMe - UltraTech (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-ultratech-medium.md)
- [TryHackMe - LazyAdmin (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-lazyadmin-easy.md)
- [TryHackMe - Anonymous (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-anonymous-medium.md)
- [TryHackMe - tomghost (Easy)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-tomghost-easy.md)
- [TryHackMe - ConvertMyVideo (Medium)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-convertmyvideo-medium.md)
- [TryHackMe - Brainpan 1 (Hard)](https://ret2basic.gitbook.io/ctfwriteup/red-teaming/tcm-linux-privilege-escalation-course/tryhackme-brainpan-1-hard.md)