CTF Methodology and Writeup Template

A repeatable process beats random poking. This is a methodology plus a fill-in template for box-style CTFs (HTB, lab boxes, ApeXLabs HACK).

#The loop

1. Enumerate — full port scan, then deep scan the open ports (Nmap Security Cheat Sheet).
2. Enumerate more — web (Directory and Vhost Fuzzing), services, versions.
3. Foothold — find the one exploitable thing; get a shell.
4. Stabilize — upgrade to a proper TTY.
5. Privilege escalation — Linux Privilege Escalation / Windows Privilege Escalation.
6. Loot & document — flags, creds, screenshots.

# the classic opener
nmap -p- --min-rate 5000 -oA all-ports target
nmap -sCV -p <open-ports> -oA deep target

#Writeup template

# <Box Name>  —  <IP>
## Recon
- nmap: <open ports / services>
## Enumeration
- <web dirs, versions, findings>
## Foothold
- Vuln: <what> →  shell as <user>
## Privilege Escalation
- Vector: <misconfig> →  root
## Loot
- user.txt / root.txt, creds
## Remediation
- <how the box owner should fix it>

Keep every writeup — they become your personal playbook. Stay in scope: Rules of Engagement and Authorization.