My personal site. I mostly break things, but sometimes I'll code things also. https://georgeosterweil.com Introduction This weekend, I decided play in UIUCTF, an online event organized by the SIGPwny security group at The University of Illinois at Urbana-Champaign. This post is a writeup of login_page, a 200-point web challenge. In this event I went by the name “I am (G)root”, playing with a couple... Mon, 20 Jul 2020 02:00:00 +0000 https://georgeosterweil.com/2020-07-20-UIUCTF-login-page/ https://georgeosterweil.com/2020-07-20-UIUCTF-login-page/ Intro For this post, I’ll try my hand at a writeup for a recently-retried box on Hack the Box: a machine named Access. This is my first time trying this, so sorry if the format isn’t great. Also my notes might be lacking at times. I had to go back... Sat, 02 Mar 2019 16:00:00 +0000 https://georgeosterweil.com/2019-03-02-HTB-access/ https://georgeosterweil.com/2019-03-02-HTB-access/ Introduction This is a writeup for a bug I found a few months ago in Facebook’s Capture the Flag Platform (FBCTF). It was a fixed a while ago, so I’ll describe the bug and how I found it. I discovered this bug when participating in Facebook’s 2018 CTF and Bug... Wed, 20 Feb 2019 03:00:00 +0000 https://georgeosterweil.com/2019-02-20-fbctf-idor/ https://georgeosterweil.com/2019-02-20-fbctf-idor/ Quick intro - I’ve been meaning to have a blog for my security-related rambling for a while, but I never actually got around to it. So that’s basically what this is. I’ll probably mostly do stuff like Hack the Box writeups, but I may also just talk about various security issues, or do... Sat, 16 Feb 2019 19:00:00 +0000 https://georgeosterweil.com/2019-02-16-hi/ https://georgeosterweil.com/2019-02-16-hi/