https://hlvm.dk/ Software, Game Development & Cyber Security. 2026-09-23T20:11:03+02:00 HLVM https://hlvm.dk/ Jekyll © 2026 HLVM /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-05-11T15:27:00+02:00 2026-05-11T15:27:00+02:00 https://hlvm.dk/posts/Coding-Practices/ HLVM

A web challenge about unsafe Python pickle deserialization hidden inside a code editor.

2026-05-11T00:00:00+02:00 2026-05-11T00:00:00+02:00 https://hlvm.dk/posts/Greetings/ HLVM

A Python/Jinja2 SSTI challenge using SandboxedEnvironment and CVE-2025-27516.

2026-05-10T00:00:00+02:00 2026-05-10T00:00:00+02:00 https://hlvm.dk/posts/Gateway/ HLVM

From a web dashboard to full root access.

2025-03-17T10:44:00+01:00 2025-03-17T10:44:00+01:00 https://hlvm.dk/posts/PHP101/ HLVM

A PHP Jail challenge. No alphanumeric characters, only 125 bytes.

2025-03-17T00:51:00+01:00 2025-03-17T00:51:00+01:00 https://hlvm.dk/posts/The-Gauntlet-2/ HLVM

This challenge is a continuation of the previous challenge The Gauntlet Pt. 1 This writeup is WIP and may be incomplete. 🗒️ Challenge description So, part two.. gitgud, get root.. 😎 Writeup Running whoami reveals that we are user1. Looking in our home directory, we see a file named testBin, which is owned by user2 and has the SUID bit set. This means that we can run the binary as u...