We write down
how we broke it.
Technical writeups from CTF challenges, lab exercises and real engagements. Published by members, always with a reproducible path.
No writeups published yet.
StyxSec was founded in 2026 and has not published research yet. The first writeups land here as members finish their first labs and competitions.
What a StyxSec writeup owes you.
The bar the first published piece will be held to.
A working reproduction
Every claim must be reachable from the article alone: exact versions, a command or request, and the observed output. "It should work" is not a reproduction.
The failed paths
What you tried first and why it did not work. This is usually the most useful paragraph in the piece.
A clear boundary on impact
State what you proved and what you only suspect. We would rather publish a modest confirmed finding than an inflated one.
Disclosure before publication
Anything affecting a live third party waits for their acknowledgement. Minimum 90 days, or their stated policy if longer.
Found something interesting?
Members get a review pass and a publish slot on this page. Bring us a bug and a rough draft; we will handle the rest.