root@sec-portfolio:~$
  

  
  

    
    SESSION ACTIVE
  







  

    

      

        

          [ACCESS LEVEL: PUBLIC]
        

        

          EXPLOIT.
          ANALYZE.
          DEFEND.
        

        

          CTF competitor and Hack The Box regular, training through Olicyber and CyberChallenge.IT
          with one goal in sight: a spot on TeamItaly. This is my competition log, not a client report.
        

        

          ./view_writeups.sh
          --connect
        

      


      

        

          

            

              
              
              
            

            exploit_chain.sh — 80x24
            click to type
          

          

        

      

    


    

      

        SQLI//
        XSS//
        SSRF//
        PRIVESC//
        RCE//
        BUFFER OVERFLOW//
        KERNEL EXPLOITATION//
        CRYPTO//
        REVERSING//
        SQLI//
        XSS//
        SSRF//
        PRIVESC//
        RCE//
        BUFFER OVERFLOW//
        KERNEL EXPLOITATION//
        CRYPTO//
        REVERSING//
      

    

  


  

    

      $ whoami
      
Operator Profile

    

    

      

        

          I'm building my way into offensive security through Italian CTF programs — Olicyber and
          CyberChallenge.IT — and by grinding boxes on Hack The Box. Web and crypto challenges are
          where I spend most of my time, with binary exploitation as the thing I'm actively leveling up.
        

        

          No real-world vulnerabilities disclosed yet — everything here comes from CTF competitions
          and lab environments. Every event gets logged, win or lose. Next milestone: qualifying for
          TeamItaly.
        

      

      

        

          00
          CTF Events — 2026
        

        

          Olicyber
CyberChallenge.IT
          Training Programs
        

        

          Hack The Box
          Active Platform
        

        

          TeamItaly 2027
          Next Target
        

      

    

  


  

    

      $ scan --skills --verbose
      
Capability Matrix

    

    


      

        

          OFFENSIVE
          
Web Exploitation

        

        
    
          
  • SQL / NoSQL Injection
    • 
          
  • Auth & Session Attacks
    • 
          
  • SSRF / SSTI Chains
    • 
          
  • Deserialization Bugs
    • 
        

      


      

        

          BINARY
          
Reverse Engineering

        

        
    
          
  • x86 / ARM Disassembly
    • 
          
  • Heap & Stack Exploitation
    • 
          
  • ROP Chain Construction
    • 
          
  • Firmware Analysis
    • 
        

      


      

        

          INFRA
          
Network & Systems

        

        
    
          
  • Active Directory Attacks
    • 
          
  • Cloud Misconfig (AWS/GCP)
    • 
          
  • C2 Infrastructure
    • 
          
  • Lateral Movement
    • 
        

      


      

        

          DEFENSE
          
Blue Team Tooling

        

        
    
          
  • SIEM Rule Authoring
    • 
          
  • Threat Hunting
    • 
          
  • Malware Triage
    • 
          
  • Hardening Playbooks
    • 
        

      


    

  


  

    

      $ ls -la ./ctf_notes
      
Challenge Notes

    

    


      

        

          HARD
          PascalCTF 2026
        

        
Crypto Chain — Lattice Reduction Puzzle

        
Broke a custom RSA variant by recovering related primes through a lattice-based attack,
          after ruling out the more obvious Wiener's attack path.

        

          #crypto#rsa#lattice
        

        read_notes.md →
      


      

        

          MEDIUM
          boroCTF 2026
        

        
Web — Template Injection to Flag Read

        
Traced an unsanitized user field into a server-side template render, then escalated the
          SSTI into arbitrary file read to grab the flag.

        

          #web#ssti
        

        read_notes.md →
      


      

        

          MEDIUM
          CTF@CIT 2026
        

        
Pwn — Format String to GOT Overwrite

        
Used an uncontrolled format string to leak a libc address, then overwrote a GOT entry to
          redirect execution into a stack-planted shellcode.

        

          #pwn#formatstring
        

        read_notes.md →
      


      

        

          EASY
          Codegate CTF 2026 Prelim
        

        
Misc — Weak Session Token Prediction

        
Recovered the PRNG seed behind a session token generator from timing metadata, then predicted
          the admin session well within the challenge window.

        

          #misc#prng
        

        read_notes.md →
      


    

  


  

    

      $ history --ctf --user=HexFud
      
Competition Log

    

    

      

        EVENTSCORERATING WEIGHT
      

      

        CTF@CIT 202610,534.005.514
      

      

        PascalCTF 20261,950.006.384
      

      

        boroCTF 20263,000.004.100
      

      

        Codegate CTF 2026 Preliminary250.003.011
      

      

        V1T CTF 202631.000.084
      

      

        TRX CTF 20262.000.073
      

    

  


  

    

      $ nc -v contact.me 443
      
Open a Connection

    

    

      

        

          

            
            
            
          

          connection_request.sh
        

        

          
          
          
          
          
          

        

      

      

        
GITHUBgithub.com/HexFud

        
HACK THE BOXhackthebox.com/HexFud

        
PROGRAMSOlicyber // CyberChallenge.IT

        
STATUSTRAINING FOR TEAMITALY 2027