$ cat /var/log/flags/captured

Capture The Flag.

Verified offensive security training on the platforms professionals use. Every technique learned here feeds back into the homelab's defenses.

Verified badges

Independent, dynamically generated badges — pulled directly from HTB and THM servers. These are not screenshots — they update in real time as Stéphane progresses.

The feedback loop

Every offensive technique learned directly strengthens a defensive layer on the homelab. This is not a hobby — it is a feedback loop between offense and defense.

Practiced techniques

Skills acquired and validated on real environments — not theory, captured flags.

Active Directory

Kerberoasting AS-REP Roasting ACL abuse MSSQL impersonation Password spraying BloodHound enum WinRM lateral movement

Web exploitation

SQLi SSTI LFI / RFI Command injection OAuth redirect abuse Cookie manipulation

Cryptography & cracking

Hashcat (PBKDF2, bcrypt) John the Ripper Hash identification Salt extraction GPU cracking (RTX 3090)

Enumeration & reconnaissance

Nmap Gobuster / ffuf SMB enum SNMP walk DNS zone transfer Service fingerprinting

Privilege escalation

SUID / capabilities Sudo misconfiguration Cron abuse Kernel exploits Service permissions Token impersonation

Tools

Impacket Evil-WinRM Netexec Metasploit Burp Suite Chisel / ligolo LinPEAS / WinPEAS

The numbers

Offensive training is not a narrative — it is measurable progress.

24 HTB machines
#972 HTB global rank
63 Root-Me challenges
35 THM rooms
95 total flags
765 Root-Me points
last edit2026-06-05·commit0b94b1f·signedclaude-opus-4-7+stéphane