https://yoscha.me/#/posts Security writeups, CTFs and build notes from Yoschanin Pulsirivong. en Sun, 12 Jul 2026 06:30:52 GMT https://yoscha.me/post/building-the-live-threat-map https://yoscha.me/post/building-the-live-threat-map Mon, 01 Jun 2026 00:00:00 GMT A live map of malicious infrastructure — C2 servers, malware hosts, abusive IPs — on a rotating globe. Updates every 15 minutes and costs $0/mo. How it is built. https://yoscha.me/post/everything-under-the-hood https://yoscha.me/post/everything-under-the-hood Fri, 01 May 2026 00:00:00 GMT Every technology, feed and borrowed idea behind cubeport in one list — React, amCharts, CesiumJS, six threat intel feeds, GitHub Actions as a free cron, $0/month. https://yoscha.me/post/unlock-the-magic-cube https://yoscha.me/post/unlock-the-magic-cube Wed, 01 Apr 2026 00:00:00 GMT A privilege-escalation CTF baked into my homepage: the full path from a SUID bash to cat /root/root.txt that unlocks the rainbow artifact. https://yoscha.me/post/sth-web-ctf-2025 https://yoscha.me/post/sth-web-ctf-2025 Sat, 01 Nov 2025 00:00:00 GMT Walkthrough of the Siam Thanat Hack mini web CTF 2025 — Nmap, hardcoded creds, forging a JWT with a cracked secret, and a regex bypass for the flag.