TryHackMeMedium
No Name CTF - TryHackMe Writeup
Room
No Name CTF- TryHackMe Writeup
root@cyber:~
$whoami
> Shivang Tiwari
a.k.a sh1v4ng
$cat ./role.txt
Security Engineer (Red Team Research & Offensive Security)
$cat ./mission.txt
Primary focus on red team security research and VAPT, with automation to scale testing and a light touch on blue/purple fundamentals.
$█
scroll down
///
About.me
I'm Shivang Tiwari — a Security Engineer focused on red team research, VAPT, and web/API/cloud attack paths. Currently building AI-powered vulnerability detection at Astra Security.
Explore my work on GitHub · CV · Resume (PDF)
75
CTF Writeups
1
Research Blogs
27
Security Notes
30+
CTF Events
Top 1%
TryHackMe Rank
5+
Events Organised
1+ Year
Experience
BFCET'24
Hackathon Runners Up
Profiles You Might Find Interesting
TryHackMe
A gamified, hands-on cyber security training platform with blue, red and purple team content for all skill levels.
picoCTF
Beginner-friendly CTF challenges by Carnegie Mellon University. Learn cybersecurity through hands-on challenges.
CTFTime
The main aggregator of CTF competitions and team rankings. Track CTF events and team performance worldwide.
///
Skills.matrix
Attack Chaining & Exploitation92%
Reconnaissance & Attack Surface Mapping90%
Threat Modelling & Risk Analysis88%
Web/API Exploitation (OWASP Top 10)92%
> Key tools:
Burp SuiteOWASP ZAPSQLMapNmapGobusterMetasploit
> Tech stack:
>Additional expertise:
Advanced Persistent Threat SimulationAttack Chain DevelopmentDAST / SAST Pipeline EngineeringAI-Driven Vulnerability DetectionAutonomous Security AgentsCloud Offense & Defense (AWS)API Fuzzing & Business Logic AbuseWAF / IDS Evasion TechniquesThreat Intelligence & ModellingIncident Response & TriageDetection Engineering (Sigma/YARA)Security Automation & Orchestration
///
CTF_Writeups.log
$ cat ./writeups/* | grep -i "interesting"
TryHackMeEasy
Domino - TryHackMe Writeup
Room
Domino TryHackMe writeup — IDOR, JWT tampering, eval-based RCE, credential reuse and a writable cron script chained into full system compromise.
TryHackMeMedium
Internal - TryHackMe Writeup
Room
Internal TryHackMe writeup — WordPress brute force, a theme-editor reverse shell, SSH tunneling into a Jenkins container, and a cracked bcrypt hash leading to root.
TryHackMeMedium
Jump - TryHackMe Writeup
Room
Jump TryHackMe writeup — anonymous FTP upload abuse, a cron-run recon pipeline, group-membership pivots and pspy enumeration to hop from recon_user up the stack.