https://frederik353.github.io/writeups/ctfs/lactf-26/ Recent content in LA CTF 2026 on Frederik353 Hugo -- gohugo.io en © 2026 Frederik Tokle Negård Sun, 08 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/lactf-26/blogler/ Sun, 08 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/lactf-26/blogler/ YAML anchor aliasing creates a shared reference that bypasses path validation via display_name mutation. https://frederik353.github.io/writeups/ctfs/lactf-26/narnes-bobles-and-bobles-narnes/ Sun, 08 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/lactf-26/narnes-bobles-and-bobles-narnes/ Two type confusion bugs in a Bun bookstore: string price NaN trick, then batch INSERT column inference. https://frederik353.github.io/writeups/ctfs/lactf-26/tcademy/ Sun, 08 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/lactf-26/tcademy/ Heap exploitation on glibc 2.35: integer underflow to massive heap overflow, and two paths to shell: libc GOT overwrite or House of Apple 2 FSOP.