HTB Writeup – Gavel

Posted on 2025-11-30

SQL injection abusing PDO substitution in PHP Prepared Statement

HTB Writeup – Eighteen

Posted on 2025-11-16

BadSuccessor attack by creating a malicious dMSA object in AD

Posted on 2025-09-01

Classic XSS pivot & module/config/library hijacking

Posted on 2025-08-11

CVE-2024-47533: Cobbler XML-RPC flaw to steal root files

Posted on 2025-07-13

RCE for Roundcube (CVE‑2025‑49113) & below Privesc (CVE-2025-27591)

Posted on 2025-06-01

From SeManageVolumePrivilege to Golden Cert Attack

Posted on 2025-03-16

Exploit Gibbon LMS with CVE-2023-45878

Posted on 2025-01-28

Exploit a classic Glibc buffer overflow on PHP heaps & APK Reversing

Posted on 2024-12-07

Zabbix CVE-2024-36467 (JSON RPC IDOR) & CVE-2024-42327 (SQLi)

Posted on 2024-10-06

LFI, JWT Forgery, SQLi, Crontab abuse, Mercurial hook, Rsync privesc