How to follow along with this blog

Posts on this blog are interactive. You can copy commands, run code, and inspect the output without leaving the page. This post describes each component.

Terminal sessions

Terminal blocks show a session exactly as it happened. Click copy next to a command to grab it, or hit copy commands to grab every command at once and paste them into your own shell.

Output lines are colored by convention: [+] success, [-] failure, [!] warning, [*] info.

Runnable code

Code cells are editable and run right in your browser. Change something and hit Run (or Ctrl + Enter). JavaScript runs in an isolated Web Worker, and any script that runs longer than a few seconds is terminated.

const secret = 'correct horse battery staple';
const bytes = new TextEncoder().encode(secret);
const hash = await crypto.subtle.digest('SHA-256', bytes);

const hex = [...new Uint8Array(hash)]
.map((b) => b.toString(16).padStart(2, '0'))
.join('');

console.log('sha256:', hex);

Python works too, powered by Pyodide (CPython compiled to WebAssembly). The first run downloads the runtime; later runs start immediately. Python cells on the same page share state, like a Jupyter notebook — define something in one cell, use it in the next.

import hashlib

wordlist = ["password", "letmein", "hunter2", "dragon"]
target = hashlib.md5(b"hunter2").hexdigest()
print("target hash:", target)

# uses 'wordlist' and 'target' from the cell above
for word in wordlist:
  if hashlib.md5(word.encode()).hexdigest() == target:
      print(f"[+] cracked: {word}")
      break
else:
  print("[-] not in wordlist")

Regular code blocks

Plain snippets get syntax highlighting, a filename, and a copy button:

import socket

def is_open(host: str, port: int, timeout: float = 1.0) -> bool:
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
        s.settimeout(timeout)
        return s.connect_ex((host, port)) == 0

Callouts and hints

For CTF-style posts, hints and solutions stay hidden until you want them:

These are all the components used in the posts.