HTB Writeup – DarkZero

Posted on 2025-10-05

From bi-directional MSSQL linked servers in to CVE-2024-30088 LPE

HTB Writeup – Imagery

Posted on 2025-09-29

XSS pivot to pyAescrypt brute forcing

Posted on 2025-09-21

Exploit IKE IPSec via UDP discovery & the SUDO binex privesc

Posted on 2025-09-15

Python SSTI and Django Cache poisoning with Pickle Deserialization

Posted on 2025-09-07

CrushFTP auth bypass (CVE-2025-31161) and Erlang shell manipulation

Posted on 2025-09-01

Classic XSS pivot & module/config/library hijacking

Posted on 2025-08-25

Next.js auth bypass (CVE-2025-29927) & Hashicorp Terraform abusing

Posted on 2025-08-17

CVE-2024-28397: Js2py sandbox escape

Posted on 2025-08-11

CVE-2024-47533: Cobbler XML-RPC flaw to steal root files

Posted on 2025-08-03

XWiki RCE (CVE 2025‑24893) & NetDATA Path Hijacking (CVE-2024-32019)