Secret starts with analyzing web source to recover a secret token from older …
Sep 28, 2022
·
12 min readDynstr imitates a company that offers a Dynamic DNS service. The provided API …
Oct 18, 2021
·
12 min readAnother late CTF writeups for H@cktivitycon 2021 web category.
Oct 09, 2021
·
11 min readThis is my late CTF writeups for H@cktivitycon 2021 miscellaneous category.
Oct 04, 2021
·
9 min readCode execution with path traversal
Aug 06, 2021
·
9 min readSupplying a malicious update definition to Electron-updater
Jul 10, 2021
·
10 min readGetting password from automatic login script of ChromeOS
Jun 26, 2021
·
10 min readDC-6 starts off by enumerating usernames from a WordPress website and use a …
May 30, 2021
·
8 min readTurns SSRF to remote code execution and escape from a Docker container
May 15, 2021
·
9 min readSeven times seven is equal to SSTI
May 08, 2021
·
8 min read