Recently I treated myself to a year’s VIP subscription to HackTheBox, in the hope it would motivate me to do more of their machines and challenges. As a result I’m been spending most of my free time, having a go at some of the machines. So far, so good. I will admit though, I’m not very good at CTF style challenges. I get too wrapped up in the pen test mentality and end up down rabbit holes wondering why things won’t work the way they would in the wild.

I’ve known loads of people over the years who are amazing pen testers but truly suck at CTF and vice versa. I think I need more practice to get my head in to the right zone for CTFs.

I’ve literally just finished the SecNotes challenge after some rather cryptic hints from a colleague. Good fun, and as with all these challenges once you’ve done them they seem so simple.