# 0xkarma13/pentest-writeups architecture

> Architecture diagram of the GitHub repository 0xkarma13/pentest-writeups, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-26). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/0xkarma13/pentest-writeups
- Repository: https://github.com/0xkarma13/pentest-writeups

## Overview

This repository is a collection of penetration-testing lab reports and CTF write-ups, not an application with a shared runtime workflow. A reader chooses a topic and consults its report; the README explicitly links to the Metasploitable2 report, while the other documents are organized as standalone exercises. The material spans vulnerability testing, CTF challenges, Hacker Holidays activities, and reverse engineering. The sampled `decode.py` performs a small hard-coded Base64/XOR decoding task. The README and tree support this content map; most individual report contents were not sampled, so no report-to-report workflow is inferred.

Main entry points: [`README.md`](https://github.com/0xkarma13/pentest-writeups/blob/main/README.md) (Pentest Write-ups), [`metasploitable2-cve-2007-2447/report.md`](https://github.com/0xkarma13/pentest-writeups/blob/main/metasploitable2-cve-2007-2447/report.md) (Samba RCE Report), [`25 Days of Cyber Security/day1-Cookie Manipulation.md`](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day1-Cookie%20Manipulation.md) (Cookie Manipulation), [`25 Days of Cyber Security/day2-reverse shell.md`](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day2-reverse%20shell.md) (Reverse Shell)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_pentest["Pentest exercises"]
  node_day1["Cookie Manipulation"]
  node_day2["Reverse Shell"]
  node_day3["Burp Brute Force"]
  node_day4["Fuzzing<br/>[day4-Fuzzing.md]"]
  node_day5["SQL Injection<br/>[day5_SQLI.md]"]
  node_samba["Samba RCE Report<br/>[report.md]"]
  node_deserialization["Insecure Deserialization<br/>[writeup.md]"]
  node_takeover["Subdomain Takeover<br/>[writeup.md]"]
end

subgraph group_ctf["CTF write-ups"]
  node_hash["Crack the Hash<br/>[full-write-up.md]"]
  node_wiseguy["W1seGuy Challenge<br/>[writeup.md]"]
  node_simplectf["Simple CTF<br/>[writeup.md]"]
end

subgraph group_holidays["Hacker Holidays"]
  node_holiday_osint["Hacker Holidays OSINT"]
  node_holiday_room1["Room 1"]
  node_holiday_room2["Room 2<br/>[room404-day2.md]"]
  node_holiday_day6["Breakfast OSINT<br/>[OSINT_day6.md]"]
  node_holiday_room4["Packed Light<br/>[Packed-Light.md]"]
  node_decoder["Cookie Decoder<br/>[decode.py]"]
  node_holiday_room5["YAML Deserialization"]
end

subgraph group_reverse["Reverse engineering"]
  node_grand_larceny["Grand Larceny Auto"]
end

node_reader(("Reader"))
node_readme["Pentest Write-ups<br/>[README.md]"]

node_reader -->|"reads"| node_readme
node_readme -->|"links to"| node_samba
node_reader -->|"reads"| node_day1
node_reader -->|"reads"| node_day2
node_reader -->|"reads"| node_day3
node_reader -->|"reads"| node_day4
node_reader -->|"reads"| node_day5
node_reader -->|"reads"| node_samba
node_reader -->|"reads"| node_deserialization
node_reader -->|"reads"| node_takeover
node_reader -->|"reads"| node_hash
node_reader -->|"reads"| node_wiseguy
node_reader -->|"reads"| node_simplectf
node_reader -->|"reads"| node_holiday_osint
node_reader -->|"reads"| node_holiday_room1
node_reader -->|"reads"| node_holiday_room2
node_reader -->|"reads"| node_holiday_day6
node_reader -->|"reads"| node_holiday_room4
node_reader -->|"runs"| node_decoder
node_reader -->|"reads"| node_holiday_room5
node_reader -->|"reads"| node_grand_larceny

click node_readme "https://github.com/0xkarma13/pentest-writeups/blob/main/README.md"
click node_day1 "https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day1-Cookie%20Manipulation.md"
click node_day2 "https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day2-reverse%20shell.md"
click node_day3 "https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day3-Brute%20Force%20with%20BurpSuite.md"
click node_day4 "https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day4-Fuzzing.md"
click node_day5 "https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day5_SQLI.md"
click node_samba "https://github.com/0xkarma13/pentest-writeups/blob/main/metasploitable2-cve-2007-2447/report.md"
click node_deserialization "https://github.com/0xkarma13/pentest-writeups/blob/main/Insecure%20Deserialisation--for-CVE/writeup.md"
click node_takeover "https://github.com/0xkarma13/pentest-writeups/blob/main/Sundomin-Takeover/writeup.md"
click node_hash "https://github.com/0xkarma13/pentest-writeups/blob/main/Crack-the-Hash/full-write-up.md"
click node_wiseguy "https://github.com/0xkarma13/pentest-writeups/blob/main/W1seGuy/writeup.md"
click node_simplectf "https://github.com/0xkarma13/pentest-writeups/blob/main/tryhackme-simple-ctf/writeup.md"
click node_holiday_osint "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-osint.md"
click node_holiday_room1 "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/room1-hackerholidays.md"
click node_holiday_room2 "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/room404-day2.md"
click node_holiday_day6 "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/Overheard-at-Breakfast-6/OSINT_day6.md"
click node_holiday_room4 "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-room4/%20Packed-Light.md"
click node_decoder "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-room4/decode.py"
click node_holiday_room5 "https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/pyYAML-hackerholidays-room5/%20YAML-Deserializatio.md"
click node_grand_larceny "https://github.com/0xkarma13/pentest-writeups/blob/main/reverse-engineering/grand-larceny-auto.md"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_day1,node_day2,node_day3,node_day4,node_day5,node_samba,node_deserialization,node_takeover toneBlue
class node_hash,node_wiseguy,node_simplectf toneAmber
class node_holiday_osint,node_holiday_room1,node_holiday_room2,node_holiday_day6,node_holiday_room4,node_decoder,node_holiday_room5 toneMint
class node_grand_larceny toneRose
class node_reader toneIndigo
class node_readme toneTeal
```

## Components

### Pentest exercises

- [Cookie Manipulation](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day1-Cookie%20Manipulation.md): `25 Days of Cyber Security/day1-Cookie Manipulation.md`
- [Reverse Shell](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day2-reverse%20shell.md): `25 Days of Cyber Security/day2-reverse shell.md`
- [Burp Brute Force](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day3-Brute%20Force%20with%20BurpSuite.md): `25 Days of Cyber Security/day3-Brute Force with BurpSuite.md`
- [Fuzzing](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day4-Fuzzing.md): `25 Days of Cyber Security/day4-Fuzzing.md`
- [SQL Injection](https://github.com/0xkarma13/pentest-writeups/blob/main/25%20Days%20of%20Cyber%20Security/day5_SQLI.md): `25 Days of Cyber Security/day5_SQLI.md`
- [Samba RCE Report](https://github.com/0xkarma13/pentest-writeups/blob/main/metasploitable2-cve-2007-2447/report.md): `metasploitable2-cve-2007-2447/report.md`
- [Insecure Deserialization](https://github.com/0xkarma13/pentest-writeups/blob/main/Insecure%20Deserialisation--for-CVE/writeup.md): `Insecure Deserialisation--for-CVE/writeup.md`
- [Subdomain Takeover](https://github.com/0xkarma13/pentest-writeups/blob/main/Sundomin-Takeover/writeup.md): `Sundomin-Takeover/writeup.md`

### CTF write-ups

- [Crack the Hash](https://github.com/0xkarma13/pentest-writeups/blob/main/Crack-the-Hash/full-write-up.md): `Crack-the-Hash/full-write-up.md`
- [W1seGuy Challenge](https://github.com/0xkarma13/pentest-writeups/blob/main/W1seGuy/writeup.md): `W1seGuy/writeup.md`
- [Simple CTF](https://github.com/0xkarma13/pentest-writeups/blob/main/tryhackme-simple-ctf/writeup.md): `tryhackme-simple-ctf/writeup.md`

### Hacker Holidays

- [Hacker Holidays OSINT](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-osint.md): `hacker_holidays-tryhackme/hacker-holidays-osint.md`
- [Room 1](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/room1-hackerholidays.md): `hacker_holidays-tryhackme/room1-hackerholidays.md`
- [Room 2](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/room404-day2.md): `hacker_holidays-tryhackme/room404-day2.md`
- [Breakfast OSINT](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/Overheard-at-Breakfast-6/OSINT_day6.md): `hacker_holidays-tryhackme/Overheard-at-Breakfast-6/OSINT_day6.md`
- [Packed Light](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-room4/%20Packed-Light.md): `hacker_holidays-tryhackme/hacker-holidays-room4/ Packed-Light.md`
- [Cookie Decoder](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/hacker-holidays-room4/decode.py): `hacker_holidays-tryhackme/hacker-holidays-room4/decode.py`
- [YAML Deserialization](https://github.com/0xkarma13/pentest-writeups/blob/main/hacker_holidays-tryhackme/pyYAML-hackerholidays-room5/%20YAML-Deserializatio.md): `hacker_holidays-tryhackme/pyYAML-hackerholidays-room5/ YAML-Deserializatio.md`

### Reverse engineering

- [Grand Larceny Auto](https://github.com/0xkarma13/pentest-writeups/blob/main/reverse-engineering/grand-larceny-auto.md): `reverse-engineering/grand-larceny-auto.md`

### Other components

- **Reader**
- [Pentest Write-ups](https://github.com/0xkarma13/pentest-writeups/blob/main/README.md): `README.md`

## Connections

- Reader → Pentest Write-ups: reads
- Pentest Write-ups → Samba RCE Report: links to
- Reader → Cookie Manipulation: reads
- Reader → Reverse Shell: reads
- Reader → Burp Brute Force: reads
- Reader → Fuzzing: reads
- Reader → SQL Injection: reads
- Reader → Samba RCE Report: reads
- Reader → Insecure Deserialization: reads
- Reader → Subdomain Takeover: reads
- Reader → Crack the Hash: reads
- Reader → W1seGuy Challenge: reads
- Reader → Simple CTF: reads
- Reader → Hacker Holidays OSINT: reads
- Reader → Room 1: reads
- Reader → Room 2: reads
- Reader → Breakfast OSINT: reads
- Reader → Packed Light: reads
- Reader → Cookie Decoder: runs
- Reader → YAML Deserialization: reads
- Reader → Grand Larceny Auto: reads