Jaime Lightfoot on Constellations

Every so often, I re-install a social media app to post a photo, message friends, find a saved recipe… and instead find myself scrolling endlessly.

If you’re a person who has put an in inordinate amount of time into “bettering yourself”, “self help”, “therapy”, “addressing your trauma” etc and you still feel stuck, let me propose a radical idea: Treat yourself as though you actually like yourself.

I’m writing this in mid-February 2025, as I watch all sorts of political goings-on (to put it mildly) in the US, and the widespread frustration of folks towards our political leadership.

This blog post has been sitting in my head for about a year.

Several of my past projects have been catalogued elsewhere on the web, so I will link all of them here.

I’m not sure exactly when, but Microcorruption has updated its site to include a bunch more levels!

This is a writeup of the 2021 Metasploit Community CTF.

I only played a bit of WeCTF (a web-only CTF) since this weekend was pretty busy with holidays, but enjoyed the one challenge I did complete, and thought I’d write it up for later.

Cyber Apocalypse 2021 was a great CTF hosted by HTB.

Thank you to the organizers of BSidesSF, this was a great CTF!

This is a bit of a clickbait title but first, I am bad at titles and, second, I did indeed switch into from a software job into the infosec world (and pick up my OSCP along the way in 434 days.

In the pre-Covid BeforeTime, my friend told me about this LED face mask she bought.

I played in the 2020 December Metasploit Community CTF last weekend with my team.

I played in the TUCTF event with my team this weekend.

Last weekend, I played in the Women Unite Over CTF, hosted by WomenHackerz (now called We Open Tech) and several other organizations.

I skipped “leg” and went to “mistake”, which was a fun puzzle.

Most CTFs fall on the weekend but every so often, I come across a mid-week CTF.

A week after completing my OSCP, I was already having withdrawals and signed up for a VIP account on HackTheBox.

I’m a couple weeks late on this but here’s a quick writeup of the OOO (DEFCON 2019 quals) recon and web challenge called “cant_even_unplug_it”.

BSides Orlando hosted the SunshineCTF, which was inexplicably full of references to wrestling and The Rock.

This blog post is about the web challenge “EasyPhp” by IceWizard.

Better late than never, I hope?

The second-to-last level in Microcorruption!

Next up is Lagos!

Wow, the Bangalore level of Microcorruption was a good challenge for me.

In my last post I covered setup for Burp Suite, as well as the Proxy and Target tabs.

If you’ve done any web application pen testing or bug bounty hunting, you’re probably familiar with Burp Suite.

Next up, Vladivostok!

Next up is the first 100-pointer in Microcorruption: Algiers.

I did this one after Addis Ababa, full of excitement from my recently gained string format bug powers.

If you aren’t playing SANS KringleCon challenge, I highly recommend it.

Next up is Addis Ababa.

I was on a roll for a while (I wrote the previous 6ish posts in only a couple of days) and got stumped on this one for several days.

Wow, this one was tricky!

TIL that the capital of Uruguay is Montevideo.

Finally, Canada!

Another day, another revision of the Lockitall Bluetooth lock.

Wooo, another CTF level.

If I’m not already doing these writeups out of order, I will be soon.

Damn, Daniel, back it again with more CTFing.

Up next, Sydney!

One of my former coworkers pointed me to Microcorruption, which is an online (untimed) embedded CTF.

Kenny Loggins is related to this challenge in name only, but I had “Danger Zone” stuck in my head the entire time.

Five of the web series challenges were Clue-themed.

My friends and I played two CTFs this weekend, although that might be a bit generous.

We’re finally here!

Next up, after some discussion of cryptography, is wireless security.

There’s no reason that this chapter shouldn’t or couldn’t be included together with the previous chapter, but here we are.

The last section of the book focuses on cryptography and public key infrastructure.

The last chapter in this section is about data security and privacy practices.