Jan
30

Exploiting an XSS for CSRF to SQLi (Helicopter Administrator 247CTF writeup).

6 min read
Nov
12

Adminer SSRF CVE-2020-28654 (Bypass CVE-2018-7667 and smuggle POST parameters)

6 min read
Sep
25

"ACID FLAG BANK" 247CTF writeup.

5 min read
Jun
14

OSWE Course Review

4 min read
May
31

Finding vulnerabilities in an open-source CMS.

21 min read