
Typst article demo
A Typst article with Tabler icons, a rectangle, and a CeTZ figure.

A Typst article with Tabler icons, a rectangle, and a CeTZ figure.

A kernel pwn challenge I authored for GlacierCTF 2025, where you have one single bitflip to pwn the arm64 KASLR-enabled kernel. The solution makes use of the fact that the physmap on arm64 is not randomized to flip physical memory, achieving arbitrary flips to escalate to an unlimited AAW.

typstmk is a GlacierCTF 2024 challenge I authored about Typst. Players submit a document that gets compiled twice, and get the last PDF. They must (1) find a way of reading the flag, and (2) retrieving it.

Typst Lotto is a CTF challenge I authored for GlacierCTF 2025. An attacker must side-channel the Typst memoization engine to leak digits that were previously written in the document, but deleted afterwards.

gitresethard is an introductory misc challenge I authored in GlacierCTF 2025 where a player must retrieve files that were reseted from git.

A GlacierCTF 2024 challenge I authored for GlacierCTF 2024. Players must reverse-engineer and diff the provided Linux kernel image to find a subtle change in the copy-on-write KSM mechanism to solve an impossible puzzle.

Authored CTF challenge from GlacierCTF 2024. Players submit a C++ file, gets compiled on our machines with no kind of output, and does not run the binary. This allows for leaking files from the filesystem via a timing side-channel attack on C++ static evaluations.

typstastic is a typst related challenge I authored in GlacierCTF2024. It had 50 solves 3h before the end of the 24h CTF. It categorizes in the easier side of the challenges.

A Computer Vision challenge from R3CTF where we had to predict if an image was used to train the model or not.

Continuation of the Minecraft game cheating challenge where you had to script a cheat to find an even harder-to-find NPC.

Challenge about Minecraft where you had to find an always-teleporting NPC via game cheating.

This challenge was the continuation of r0system

Challenge from R3CTF that seemed to be about crypto but was not about crypto.

This post shows the writeup for the “luksury” challenge from he Insomnihack Final of 2024. A LUKS drive would not work with hashcash…