ffuf | Ef's log

Nov 07, 2021 · 10 min read

HackTheBox - Nunchucks

SSTI in Nunjucks and SUID capability on Perl

Linux · Ffuf · SSTI · Nunjucks · Flask · Linux-Capabilities

Jun 14, 2021 · 11 min read

HackTheBox - Tenet

Friendly PHP insecure deserialization attack and race condition

Linux · WordPress · PHP · Deserialization · Code-Review · Password-Reuse