https://00xmora.github.io/posts/Privilege-Escalation-via-Chat-Permissions-Bypass/ 2025-07-06T23:44:51+00:00 https://00xmora.github.io/posts/Auth-Token-Theft-via-CORS-Misconfiguration/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/Path-Traversal-in-File-Upload-via-GraphQL-API/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/How-I-Tricked-the-System-with-Type-Confusion-and-Became-a-System-Admin-(Briefly)/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/Exploiting-Flag26Service-Android-Messenger-Based-Service-(Hextree-CTF)/ 2025-06-09T00:00:00+00:00 https://00xmora.github.io/posts/Hextree-Labs-Flag27Service-Messenger-Vulnerability-(Solution)/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/Flag28Service-AIDL-Binding-Walkthrough-(Hextree-Lab)/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/Race-Condition-A-Detailed-Exploration/ 2025-08-03T12:43:38+00:00 https://00xmora.github.io/posts/Exploiting-SSTI-in-Node.js-Template-Rendering/ 2025-07-28T00:00:00+00:00 https://00xmora.github.io/posts/Pickle-RCE-Exfiltrating-Secrets-via-Unsafe-Deserialization/ 2025-07-31T00:00:00+00:00 https://00xmora.github.io/posts/SpEL-Injection-Exploit-AppSec-Master-Challenge-Writeup/ 2025-07-31T00:00:00+00:00 https://00xmora.github.io/posts/Node.js-Arbitrary-File-Upload-to-RCE-AppSec-Master-Challenge-Writeup/ 2025-08-03T00:00:00+00:00 https://00xmora.github.io/categories/ 2025-08-03T12:46:44+00:00 https://00xmora.github.io/tags/ 2025-08-03T12:46:44+00:00 https://00xmora.github.io/archives/ 2025-08-03T12:46:44+00:00 https://00xmora.github.io/about/ 2025-08-03T12:46:44+00:00 https://00xmora.github.io/ https://00xmora.github.io/tags/privilege-escalation/ https://00xmora.github.io/tags/access-control/ https://00xmora.github.io/tags/api-security/ https://00xmora.github.io/tags/bug-bounty/ https://00xmora.github.io/tags/cors/ https://00xmora.github.io/tags/auth-token-theft/ https://00xmora.github.io/tags/web-security/ https://00xmora.github.io/tags/path-traversal/ https://00xmora.github.io/tags/file-upload/ https://00xmora.github.io/tags/graphql/ https://00xmora.github.io/tags/gcp/ https://00xmora.github.io/tags/type/ https://00xmora.github.io/tags/confusion/ https://00xmora.github.io/tags/privilege/ https://00xmora.github.io/tags/escalation/ https://00xmora.github.io/tags/security/ https://00xmora.github.io/tags/bug/ https://00xmora.github.io/tags/bounty/ https://00xmora.github.io/tags/ctf/ https://00xmora.github.io/tags/vulnerabilities/ https://00xmora.github.io/tags/real-world/ https://00xmora.github.io/tags/stories/ https://00xmora.github.io/tags/android/ https://00xmora.github.io/tags/ipc/ https://00xmora.github.io/tags/messenger/ https://00xmora.github.io/tags/hextree/ https://00xmora.github.io/tags/services/ https://00xmora.github.io/tags/app/ https://00xmora.github.io/tags/android/ https://00xmora.github.io/tags/ctf/ https://00xmora.github.io/tags/labs/ https://00xmora.github.io/tags/messenger/ https://00xmora.github.io/tags/ipc/ https://00xmora.github.io/tags/vulnerability/ https://00xmora.github.io/tags/writeup/ https://00xmora.github.io/tags/reverse/ https://00xmora.github.io/tags/engineering/ https://00xmora.github.io/tags/android/ https://00xmora.github.io/tags/aidl/ https://00xmora.github.io/tags/binder/ https://00xmora.github.io/tags/reverse-engineering/ https://00xmora.github.io/tags/inter-process-communication/ https://00xmora.github.io/tags/hextree/ https://00xmora.github.io/tags/penetration-testing/ https://00xmora.github.io/tags/android-security/ https://00xmora.github.io/tags/race-condition/ https://00xmora.github.io/tags/security/ https://00xmora.github.io/tags/multithreading/ https://00xmora.github.io/tags/synchronization/ https://00xmora.github.io/tags/ssti/ https://00xmora.github.io/tags/nodejs/ https://00xmora.github.io/tags/vm/ https://00xmora.github.io/tags/appsecmaster/ https://00xmora.github.io/tags/rce/ https://00xmora.github.io/tags/pickle/ https://00xmora.github.io/tags/deserialization/ https://00xmora.github.io/tags/flask/ https://00xmora.github.io/tags/webhook/ https://00xmora.github.io/tags/appsecmaster/ https://00xmora.github.io/tags/spel/ https://00xmora.github.io/tags/java/ https://00xmora.github.io/tags/injection/ https://00xmora.github.io/tags/challenge/ https://00xmora.github.io/categories/web/ https://00xmora.github.io/categories/android/ https://00xmora.github.io/categories/research/ https://00xmora.github.io/categories/code-review/ https://00xmora.github.io/page2/ https://00xmora.github.io/googlefb1f3b853a05bcd1.html 2025-08-03T12:46:16+00:00