Milestones

A timeline of vulnerable machines, tools, and projects I've shipped.

2026

Nov

• Released Ledger and ShellcraftShipped Ledger and Shellcraft: a SQLite double-entry bookkeeping app and an offline reverse shell generator.
• Published Hannah Coffee on DockerLabsDockerLabsLinux target chaining local file inclusion and log poisoning to gain root.

Oct

• Published Ledger on HackMyVMHackMyVMVulnerable accounting web app featuring a CSV upload path to remote code execution.
• Published Grenade on HackMyVMHackMyVMWordPress target centered around an unauthenticated plugin vulnerability.

Sep

• Released three terminal dashboardsShipped HackMyVM Console, DockerLabs Console and Nyx Console in the same month.
• Published Groups on VulNyxVulNyxMedium-difficulty Linux machine chaining ReDoS with disk-group privilege escalation.

Aug

• Added VulNyx writeupsGitHubPublished an initial batch of 39 VulNyx walkthroughs in a single month.

Mar

• Added DockerLabs writeupsGitHubStarted documenting exploitation notes for DockerLabs containers.

Feb

• Released OSCE AssessorGitHubDeployed a clinical exam assessment web platform for medical education staff.

2025

Dec

• Built HMV CLIGitHubCreated a terminal client for searching HackMyVM machines, fetching files, and submitting flags.

Nov

• First HackMyVM walkthroughs publishedGitHubBegan writing public documentation for every machine I root.