Summary
scriptCTF Writeups 2026 Here are the writeups for all of the challenges I did:
- Midnight Snack | Geo-Osint After I downloaded the tacobell image, I saw that the photo had the words Parmer in it: So, I searched Taco Bell, W Parmer Ln and got these results. I submitted a bunch of flags to test which address was correct. Flag: scriptCTF{9900_W_Parmer_Ln}
- BruteForced | Forsenics I opened the log in Wireshark. Then, I copied n’ pasted it into spreadsheets. Get truffles’s stories in your inbox Join Medium for free to get updates from this writer. I noticed that the file would GET the flag and when it was wrong, the HTTP connection would say “NOT FOUND”. So I copied and pasted all of the text into a spreadsheet and did CTRL F to find the HTTP that would work: I went to wireshark and found the area where the flag was at. Then, I copied and pasted the link: https://ctf.scriptsorcerers.xyz/flag_4919 Here is the flag 🥳: scriptCTF{7h3_h1dd3n_3ndp01n7_g0t_l34k3d}
- Insanity Check | Misc This chall had no file desc, so i checked the html. And a clue was in the comments: So, I went to play.scriptsorceres.xyz/vibecheck and got the flag: 🚩scriptCTF{v1b3_ch3ck_p4ss3d!} Feel free to read some of my other articles! Here is one about Google Dorking: https://medium.com/bugbountywriteup/12-must-know-google-dorking-commands-in-2026-9c8538c313c9