blog.html

<!DOCTYPE html>
<html lang="en" data-theme="dark">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  
  <meta property="og:title" content="Blog - Vali" />
  <meta property="og:description" content="Security writeups, HackTheBox and TryHackMe notes, PortSwigger lab write-ups, web exploitation walkthroughs, homelab experiments, and pentesting research by Vali." />
  <meta property="og:image" content="https://aryansecops.github.io/image/profile.jpg" />
  <meta property="og:url" content="https://aryansecops.github.io/blog.html" />
  <meta property="og:type" content="website" />
  <meta name="twitter:card" content="summary_large_image" />
  <meta name="twitter:title" content="Blog - Vali" />
  <meta name="twitter:description" content="Security writeups, HackTheBox and TryHackMe notes, PortSwigger lab write-ups, web exploitation walkthroughs, homelab experiments, and pentesting research by Vali." />
  <meta name="twitter:image" content="https://aryansecops.github.io/image/profile.jpg" />
  <link rel="canonical" href="https://aryansecops.github.io/blog.html" />
<link rel="icon" href="favicon/favicon.ico">
  <link rel="icon" type="image/svg+xml" href="favicon/favicon.svg">
  <link rel="apple-touch-icon" href="favicon/apple-touch-icon.png">
  <title>Blog - Vali</title>
  <meta name="description" content="Writeups, techniques, HackTheBox and TryHackMe notes, homelab builds, and pentesting notes by Vali. Security research, storage experiments, Linux notes, and hands-on technical work.">
  <link rel="preconnect" href="https://fonts.googleapis.com" />
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  <link href="https://fonts.googleapis.com/css2?family=Syne:wght@400;600;700;800&family=Outfit:wght@300;400;500;600&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet" />
  <link rel="stylesheet" href="site.css" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="interactive.css" />
  <style>
    .page-header {
      padding: 5rem 6vw 2.8rem;
      max-width: 1180px;
      margin: 0 auto;
      display: grid;
      gap: 0.85rem;
      position: relative;
    }

    .page-header::after {
      content: "";
      width: 100%;
      height: 1px;
      margin-top: 0.7rem;
      background: linear-gradient(90deg, rgba(79, 140, 255, 0.24), var(--border) 34%, transparent);
    }

    .page-breadcrumb {
      font-family: var(--mono);
      font-size: 0.72rem;
      color: var(--text3);
      letter-spacing: 0.08em;
      text-transform: uppercase;
    }

    .page-breadcrumb a {
      color: var(--accent);
    }

    .page-breadcrumb a:hover {
      text-decoration: underline;
    }

    h1 {
      font-family: var(--display);
      font-size: clamp(2.2rem, 4vw, 3.4rem);
      font-weight: 800;
      letter-spacing: -0.04em;
      line-height: 0.98;
      margin: 0;
    }

    .page-desc {
      color: var(--text2);
      font-size: 1rem;
      line-height: 1.8;
      max-width: 38rem;
    }

    .filters {
      padding: 1.5rem 6vw 0;
      max-width: 1180px;
      margin: 0 auto;
      display: flex;
      gap: 0.6rem;
      flex-wrap: wrap;
    }

    .filter-btn {
      font-family: var(--mono);
      font-size: 0.68rem;
      letter-spacing: 0.07em;
      text-transform: uppercase;
      padding: 0.45rem 0.9rem;
      border-radius: 999px;
      border: 1px solid var(--border);
      background: rgba(255, 255, 255, 0.02);
      color: var(--text2);
      cursor: pointer;
      transition: border-color var(--transition), background var(--transition), color var(--transition), transform var(--transition);
    }

    .filter-btn:hover,
    .filter-btn:focus-visible {
      border-color: rgba(79, 140, 255, 0.28);
      color: var(--text);
      background: rgba(79, 140, 255, 0.08);
      transform: translateY(-1px);
    }

    .filter-btn.active {
      border-color: rgba(79, 140, 255, 0.34);
      color: var(--accent);
      background: rgba(79, 140, 255, 0.12);
    }

    main {
      padding: 2.2rem 6vw 6rem;
      max-width: 1180px;
      margin: 0 auto;
    }

    .posts-count {
      font-family: var(--mono);
      font-size: 0.68rem;
      color: var(--text3);
      letter-spacing: 0.08em;
      text-transform: uppercase;
      margin-bottom: 1.4rem;
    }

    .post-featured {
      position: relative;
      display: grid;
      grid-template-columns: 1fr;
      gap: 2rem;
      padding: 2.4rem;
      margin-bottom: 1.35rem;
      border-radius: 22px;
      border: 1px solid var(--border);
      background:
        linear-gradient(180deg, rgba(255, 255, 255, 0.03), rgba(255, 255, 255, 0.012)),
        linear-gradient(135deg, rgba(79, 140, 255, 0.08), transparent 42%),
        var(--surface);
      transition: border-color var(--transition), transform var(--transition), box-shadow var(--transition), background var(--transition);
      overflow: hidden;
      box-shadow: 0 18px 38px rgba(3, 8, 15, 0.28);
    }

    .post-featured::before {
      content: "Latest";
      position: absolute;
      top: 1.1rem;
      right: 1.1rem;
      font-family: var(--mono);
      font-size: 0.62rem;
      letter-spacing: 0.12em;
      text-transform: uppercase;
      color: var(--accent);
      border: 1px solid rgba(79, 140, 255, 0.18);
      background: rgba(79, 140, 255, 0.1);
      padding: 0.35rem 0.65rem;
      border-radius: 999px;
    }

    .post-featured::after {
      content: "";
      position: absolute;
      inset: 0 0 auto;
      height: 1px;
      background: linear-gradient(90deg, rgba(79, 140, 255, 0.52), transparent 72%);
    }

    .post-featured:hover {
      border-color: rgba(79, 140, 255, 0.3);
      transform: translateY(-3px);
      box-shadow: 0 24px 46px rgba(3, 8, 15, 0.34);
      background:
        linear-gradient(180deg, rgba(255, 255, 255, 0.035), rgba(255, 255, 255, 0.014)),
        linear-gradient(135deg, rgba(79, 140, 255, 0.12), transparent 44%),
        var(--surface);
    }

    .post-featured-meta,
    .post-meta {
      display: flex;
      align-items: center;
      gap: 0.75rem;
      flex-wrap: wrap;
      margin-bottom: 1rem;
    }

    .post-featured .post-title {
      font-size: clamp(1.55rem, 2.5vw, 1.95rem);
      max-width: 20ch;
    }

    .post-featured .post-excerpt {
      max-width: 56ch;
    }

    .post-featured:hover .post-title {
      color: var(--accent);
    }

    .post-featured:hover .post-read-more::after {
      transform: translateX(3px);
    }

    @media (max-width: 768px) {
      .page-header,
      .filters,
      main {
        padding-left: 1.5rem;
        padding-right: 1.5rem;
      }

      .page-header {
        padding-top: 4rem;
      }

      .post-featured {
        padding: 1.7rem;
      }
    }
  </style>
</head>
<body class="site-page archive-page">

  <nav>
    <a href="index.html" class="nav-logo"><span>~/</span>Vali</a>
    <ul class="nav-links">
      <li><a href="index.html#about">About</a></li>
      <li><a href="blog.html" class="active">Blog</a></li>
      <li><a href="learning-path.html">Path</a></li>
      <li><a href="index.html#contact">Contact</a></li>
    </ul>
    <button class="theme-btn" onclick="toggleTheme()">[ theme ]</button>
  </nav>

  <div class="page-header header-with-particles" data-particle-scope data-particle-density="82" data-particle-link-distance="122">
    <canvas class="site-particle-canvas page-particle-canvas" data-hero-particles aria-hidden="true"></canvas>
    <div class="page-breadcrumb"><a href="index.html">~</a> / Blog</div>
    <h1>Blog</h1>
    <p class="page-desc">Technical write-ups, HackTheBox and TryHackMe lab notes, homelab builds, and security walkthroughs focused on hands-on learning, tooling, and real troubleshooting.</p>
  </div>

  <div class="blog-toolbar fade-in">
    <label class="blog-search" for="post-search">
      <span class="blog-search-label">Search the archive</span>
      <input id="post-search" type="search" placeholder="Search write-ups, labs, tools, and topics" autocomplete="off" />
    </label>
    <p class="blog-search-note">Use <code>/</code> or <code>Ctrl+K</code> for the command palette. Filters and search work together.</p>
  </div>

  <div class="filters">
    <button type="button" class="filter-btn active" data-filter="all" onclick="filterPosts('all', this)">All Posts</button>
    <button type="button" class="filter-btn" data-filter="authentication" onclick="filterPosts('authentication', this)">Authentication</button>
    <button type="button" class="filter-btn" data-filter="burp-suite" onclick="filterPosts('burp-suite', this)">Burp Suite</button>
    <button type="button" class="filter-btn" data-filter="ctf" onclick="filterPosts('ctf', this)">CTF</button>
    <button type="button" class="filter-btn" data-filter="hackthebox" onclick="filterPosts('hackthebox', this)">HackTheBox</button>
    <button type="button" class="filter-btn" data-filter="homelab" onclick="filterPosts('homelab', this)">Home Lab</button>
    <button type="button" class="filter-btn" data-filter="jwt" onclick="filterPosts('jwt', this)">JWT</button>
    <button type="button" class="filter-btn" data-filter="linux" onclick="filterPosts('linux', this)">Linux</button>
    <button type="button" class="filter-btn" data-filter="owasp" onclick="filterPosts('owasp', this)">OWASP</button>
    <button type="button" class="filter-btn" data-filter="port-swigger" onclick="filterPosts('port-swigger', this)">Port Swigger</button>
    <button type="button" class="filter-btn" data-filter="ssti" onclick="filterPosts('ssti', this)">SSTI</button>
    <button type="button" class="filter-btn" data-filter="sqli" onclick="filterPosts('sqli', this)">SQLi</button>
    <button type="button" class="filter-btn" data-filter="tools" onclick="filterPosts('tools', this)">Tools</button>
    <button type="button" class="filter-btn" data-filter="tryhackme" onclick="filterPosts('tryhackme', this)">TryHackMe</button>
    <button type="button" class="filter-btn" data-filter="web" onclick="filterPosts('web', this)">Web</button>
    <button type="button" class="filter-btn" data-filter="xss" onclick="filterPosts('xss', this)">XSS</button>
  </div>

  <main>
    <div class="posts-count" id="posts-count">14 posts</div>

    <a href="blog/hackthebox-devhub.html" class="post-featured fade-in" data-tags="ctf hackthebox htb season-11 devhub"><div><div class="post-featured-meta"><span class="post-date">2026-07-10</span><span class="post-tag">HackTheBox</span><span class="post-tag">Planned</span></div><div class="post-title">HackTheBox Devhub Walkthrough Shell</div><p class="post-excerpt">A staged walkthrough shell for Devhub from Season 11: Season of the Punk, ready for recon, foothold, escalation, and debrief notes.</p><span class="post-read-more">open draft shell</span></div></a>

    <div class="posts-grid" id="posts-grid">
      <a href="blog/hackthebox-labs.html" class="post-card fade-in" data-tags="ctf hackthebox htb season-11 devhub"><div class="post-meta"><span class="post-date">2026-07-10</span><span class="post-tag">CTF</span><span class="post-tag">HackTheBox</span></div><div class="post-title">HackTheBox Lab Notes</div><p class="post-excerpt">A growing machine index for HackTheBox write-ups, beginning with Devhub from Season 11: Season of the Punk.</p><span class="post-read-more">open hub</span></a>
      <a href="blog/authentication-labs.html" class="post-card fade-in" data-tags="web port-swigger burp-suite authentication"><div class="post-meta"><span class="post-date">2026-07-02</span><span class="post-tag">Web</span><span class="post-tag">Authentication</span></div><div class="post-title">PortSwigger Authentication Labs</div><p class="post-excerpt">A growing, screenshot-led walkthrough covering username enumeration and a direct account-page bypass of 2FA.</p><span class="post-read-more">read post</span></a>
      <a href="blog/tryhackme-valley.html" class="post-card fade-in" data-tags="ctf tryhackme linux"><div class="post-meta"><span class="post-date">2026-07-02</span><span class="post-tag">TryHackMe</span><span class="post-tag">Complete</span></div><div class="post-title">TryHackMe Valley: Complete Walkthrough</div><p class="post-excerpt">The full Valley path from web leaks and PCAP analysis through binary reversing, lateral movement, and Python module hijacking for root.</p><span class="post-read-more">read walkthrough</span></a>
      <a href="blog/tryhackme-labs.html" class="post-card fade-in" data-tags="ctf tryhackme linux"><div class="post-meta"><span class="post-date">2026-07-02</span><span class="post-tag">CTF</span><span class="post-tag">TryHackMe</span></div><div class="post-title">TryHackMe Lab Notes</div><p class="post-excerpt">A growing index of recon-to-root room write-ups, beginning with the completed Valley challenge.</p><span class="post-read-more">open hub</span></a>
      <a href="blog/ssti-labs.html" class="post-card fade-in" data-tags="web port-swigger burp-suite ssti"><div class="post-meta"><span class="post-date">2026-06-14</span><span class="post-tag">Web</span><span class="post-tag">SSTI</span></div><div class="post-title">PortSwigger SSTI Labs Write-Up</div><p class="post-excerpt">A full SSTI walkthrough covering ERB, Tornado, FreeMarker, Handlebars, Django, and Twig with screenshot-driven reasoning for every lab.</p><span class="post-read-more">read post</span></a>
      <a href="blog/jwt-labs.html" class="post-card fade-in" data-tags="web port-swigger burp-suite jwt"><div class="post-meta"><span class="post-date">2026-06-07</span><span class="post-tag">Web</span><span class="post-tag">JWT</span></div><div class="post-title">PortSwigger JWT Labs Write-Up</div><p class="post-excerpt">A Burp-first walkthrough of PortSwigger's JWT labs, covering none-alg abuse, weak secrets, header injection, and algorithm confusion without Python automation.</p><span class="post-read-more">read post</span></a>
      <a href="blog/nas-frankenstein-build.html" class="post-card fade-in" data-tags="homelab tools networking storage"><div class="post-meta"><span class="post-date">2026-04-18</span><span class="post-tag">Home Lab</span><span class="post-tag">Networking</span></div><div class="post-title">Frankenstein NAS Build</div><p class="post-excerpt">Turning an old ISP router and a powered 1TB drive into a working home NAS, including Windows 11 SMB fixes, iPhone access, and the limits of a LAN-only build.</p><span class="post-read-more">read post</span></a>
      <a href="blog/juice-shop-writeup.html" class="post-card fade-in" data-tags="web xss sqli owasp ctf"><div class="post-meta"><span class="post-date">2026-04-03</span><span class="post-tag">Web</span><span class="post-tag">Burp Suite</span></div><div class="post-title">OWASP Juice Shop Write-Up</div><p class="post-excerpt">A practical walkthrough of OWASP Juice Shop, covering challenge discovery, exploitation paths, and the use of Burp Suite against a modern training target.</p><span class="post-read-more">read post</span></a>
      <a href="blog/sqli-labs.html" class="post-card fade-in" data-tags="web port-swigger"><div class="post-meta"><span class="post-date">2026-04-02</span><span class="post-tag">Web</span><span class="post-tag">Port Swigger</span></div><div class="post-title">PortSwigger SQLi Labs Write-Up</div><p class="post-excerpt">A structured walkthrough of PortSwigger SQL injection labs, including manual testing, Python-assisted exploitation, and the reasoning behind each step.</p><span class="post-read-more">read post</span></a>
    </div>

    <div class="posts-empty" id="posts-empty" hidden>
      <div class="posts-empty-title">No posts match that search yet.</div>
      <p>Try a broader keyword or switch back to the full archive.</p>
    </div>
  </main>

  <footer>
    <span>(c) 2025 Vali</span>
    <span class="footer-back" onclick="window.scrollTo({top:0,behavior:'smooth'})">^ back to top</span>
  </footer>

  <script src="script.js"></script>
</body>
</html>