Category
web
4 writeups in this category.
-
How I Tricked the System with Type Confusion and Became a System Admin (Briefly)
A brief story of how a Type Confusion vulnerability allowed privilege escalation in a real-world scenario.
-
Path Traversal in File Upload via GraphQL API
A file upload endpoint accepted folder traversal sequences, enabling unauthorized file placement and abuse of signed Google Cloud Storage URLs.
-
Auth Token Theft via CORS Misconfiguration
A critical CORS misconfiguration allowed stealing authentication tokens by abusing a wildcard-like origin match and Access-Control-Allow-Credentials: true.
-
Privilege Escalation via Chat Permissions Bypass
A real-world case where UI-level permission controls were not enforced at the API level, allowing message sending and user impersonation.