HTB Writeup – Backfire

Posted on 2025-01-20

Exploit open-source C2s: Havoc (CVE-2024-41570) & Hardhat

HTB Writeup – Heal

Posted on 2024-12-15

RCEs for LimeSurvey & HashiCorp Consul

Posted on 2024-12-08

Exploit Ghost CMS 5.58.0 CVE-2023-40028 after a Git leak

Posted on 2024-12-07

Zabbix CVE-2024-36467 (JSON RPC IDOR) & CVE-2024-42327 (SQLi)

Posted on 2024-11-25

Classic XSS + LFI exploit combination

Posted on 2024-10-21

Deserialization for pymatgen & Directory Traversal on aiohttp

Posted on 2024-10-13

Android reversing & Dump sessions from SolarPutty

Posted on 2024-10-06

LFI, JWT Forgery, SQLi, Crontab abuse, Mercurial hook, Rsync privesc

Posted on 2024-09-22

XSS + RCE for PrestaShop & exploit SSTI on ChangeDetection.io

Posted on 2024-09-15

Exploit H2 Database for Java web app & abuse Apache Thrift