Shubh's Corner
= Code, Create, Repeat =
Shubh
I write about development, tech, security, and little trinkets of what I enjoy
Posts
A writeup for the Capsule Corp Operations Console Web challenge from BSides Mumbai 2026, exploiting client-side trust and exposed AES keys.
How does passwd temporarily become root? What is the SUID bit actually doing at the kernel level? And why can giving a program one privileged operation expose far more authority than it actually needs? We trace the mechanism, then break it with PwnKit.
What does it actually mean to have privilege on Linux? This first article traces how the kernel checks permissions, why processes carry multiple UIDs, and where the traditional DAC model starts to crack.
A deep dive into how containers actually work by building one from scratch using runc — the low-level runtime behind Docker, containerd, and Podman.
Detailed writeup for Empty Chairs from Hack The Box Cyber Apocalypse CTF 2026: The Salt Crown.
Detailed writeup for False Order from Hack The Box Cyber Apocalypse CTF 2026: The Salt Crown.
Detailed writeup for The Ash-Binder Signature from Hack The Box Cyber Apocalypse CTF 2026: The Salt Crown.
Detailed writeup for Deception Strategy from Hack The Box Cyber Apocalypse CTF 2026: The Salt Crown.