https://frederik353.github.io/writeups/ctfs/pascal-26/ Recent content in PascalCTF 2026 on Frederik353 Hugo -- gohugo.io en © 2026 Frederik Tokle Negård Sun, 01 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/ahc/ Sun, 01 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/ahc/ Tcache bin confusion via chunk size corruption. https://frederik353.github.io/writeups/ctfs/pascal-26/wordy/ Sun, 01 Feb 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/wordy/ Recovering MT19937 state from partial outputs using Z3 SAT solving. https://frederik353.github.io/writeups/ctfs/pascal-26/curly-crab/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/curly-crab/ Reversing Rust serde deserialization to recover a JSON schema. https://frederik353.github.io/writeups/ctfs/pascal-26/grande-inutile-tool/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/grande-inutile-tool/ Buffer overflow corrupts path validation flag, enabling path traversal. https://frederik353.github.io/writeups/ctfs/pascal-26/pdfile/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/pdfile/ XXE injection with blacklist bypass via URL encoding. https://frederik353.github.io/writeups/ctfs/pascal-26/strangevm/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/strangevm/ Reverse a simple VM to understand its character transformation. https://frederik353.github.io/writeups/ctfs/pascal-26/travel-playlist/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/travel-playlist/ Path traversal via unsanitized file path parameter. https://frederik353.github.io/writeups/ctfs/pascal-26/zazastore/ Sat, 31 Jan 2026 00:00:00 +0000 https://frederik353.github.io/writeups/ctfs/pascal-26/zazastore/ NaN comparison bypass in a Node.js shopping cart.