Writeups to all web exploitation challenges I solved during picoCTF 2026.

A writeup from the 2025 SANS Holiday Hack. We'll explore path hijacking in order to run a script with elevated privileges.

An introduction to how websites work. An overview of web servers and DNS, and a walkthrough of exactly how I set up this website.