>_
omar
.
samy
About
Services
Experience
Blog
Get in touch
About
Services
Experience
Blog
Get in touch
Category
code-review
4 writeups in this category.
All writeups
All categories
Node.js Arbitrary File Upload to RCE – AppSec Master Challenge Writeup
3 Aug 2025
·
code-review
·
nodejs · file-upload · path-traversal
→
SpEL Injection Exploit – AppSec Master Challenge Writeup
31 Jul 2025
·
code-review
·
spel · java · rce
→
Pickle RCE: Exfiltrating Secrets via Unsafe Deserialization
31 Jul 2025
·
code-review
·
rce · pickle · deserialization
→
Code Review: Exploiting SSTI in Node.js Template Rendering
28 Jul 2025
·
code-review
·
ssti · nodejs · vm
→