Archives
- 03 Aug Node.js Arbitrary File Upload to RCE – AppSec Master Challenge Writeup
- 31 Jul SpEL Injection Exploit – AppSec Master Challenge Writeup
- 31 Jul Pickle RCE: Exfiltrating Secrets via Unsafe Deserialization
- 28 Jul Code Review: Exploiting SSTI in Node.js Template Rendering
- 16 Jun Race Condition A Detailed Exploration
- 15 Jun Flag28Service AIDL Binding Walkthrough (Hextree Lab)
- 14 Jun Hextree Labs - Flag27Service Messenger Vulnerability (Solution)
- 09 Jun Exploiting Flag26Service – Android Messenger-Based Service (Hextree CTF)
- 24 Mar How I Tricked the System with Type Confusion and Became a System Admin (Briefly)
- 11 Mar Path Traversal in File Upload via GraphQL API
- 08 Mar Auth Token Theft via CORS Misconfiguration