HTB Writeup – Unrested

Posted on 2024-12-07

Zabbix CVE-2024-36467 (JSON RPC IDOR) & CVE-2024-42327 (SQLi)

HTB Writeup – Alert

Posted on 2024-11-25

Classic XSS + LFI exploit combination

Posted on 2024-10-21

Deserialization for pymatgen & Directory Traversal on aiohttp

Posted on 2024-10-13

Android reversing & Dump sessions from SolarPutty

Posted on 2024-10-06

LFI, JWT Forgery, SQLi, Crontab abuse, Mercurial hook, Rsync privesc

Posted on 2024-09-22

XSS + RCE for PrestaShop & exploit SSTI on ChangeDetection.io

Posted on 2024-09-15

Exploit H2 Database for Java web app & abuse Apache Thrift

Posted on 2024-09-09

SQLPad RCE vulnerability & Froxlor exploit via Chrome remote debugging

Posted on 2024-08-25

RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.

Posted on 2024-08-21

Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor