Richie Havoc
Security Researcher | Student | Pentester | CTF Player 🎉
Latest Posts
View all →
One Username, Entire Identity: How OSINT Investigators Build Full Profiles From Almost Nothing
Most people use the same username everywhere. That single habit is an OSINT investigator's greatest gift. This step-by-step guide walks through the complete methodology for building a full identity profile from a single username — using free tools, real scenarios, and techniques used by law enforcement, journalists, and security researchers in 2026.
AI-Powered OSINT in 2026: How Machine Learning Is Changing the Way We Investigate
AI and machine learning have transformed open-source intelligence from a slow, manual discipline into a real-time, automated powerhouse. This deep-dive covers the tools, real scenarios, techniques, and ethical lines every OSINT investigator must understand in 2026.
From Zero to Root: A Beginner's Complete Guide to Solving HTB Easy Machines in 2026
New to Hack The Box? This complete 2026 beginner's guide walks you through every step — from setting up your VPN to rooting your first Easy machine. Tools, methodology, tips, and real examples inside.
AI is Now Your Biggest Enemy in CTFs - Here's How to Fight Back
AI agents are solving CTF challenges faster than human experts in 2026. This opinion piece breaks down what that means for your skills, your career, and how to stay relevant as a hacker in the age of agentic AI.
How to Write a CTF Writeup That Gets 10,000 Views (SEO + Structure Guide)
Want your CTF writeup to actually get read? This complete guide covers SEO, structure, storytelling, images, and the #1 reason most writeups get zero traffic — and how to fix it.
HTB VariaType Complete Writeup — CVE-2025-66034 & Font Exploitation
VariaType is a cutting-edge HackTheBox machine from Season 10 featuring a web-based variable font generator. The exploitation chain involves chaining three critical vulnerabilities—fontTools CVE-2025-66034 for initial webshell creation, FontForge CVE-2024-25081 for lateral privilege escalation to the steve user, and a setuptools PackageIndex path traversal vulnerability for root access. This writeup provides complete step-by-step instructions with detailed technical analysis of each exploit mechanism.