Finding Prototype Pollution gadgets with CodeQL

2022-01-04
#Prototype Pollution  #NodeJS  #JavaScript  #CodeQL 

Practical Introduction to CodeQL

2021-12-13
#CodeQL 

Intigriti’s November 2021 XSS challenge writeup

2021-11-22
#CTF  #Intigriti  #Web  #XSS 

Intigriti’s October 2021 XSS challenge writeup

2021-10-27
#CTF  #Intigriti  #Web  #XSS 

CyberEDU’s Web challenges' writeups

2021-09-26
#CTF  #CyberEDU  #Web  #PHP  #LFI  #OOB  #Pickle  #Code Injection  #Loose Comparison 

AeroCTF 2021’s Not received points solution

2021-02-27
#CTF  #AeroCTF  #Web  #XSS 

CybexCTF 2021’s WaloW3b solver.

2021-02-12
#CTF  #CybexCTF  #Web  #HTML  #XSLeak 

Solution for some DefCamp 2020 CTF’s Web challenges

2020-12-06
#CTF  #DefCamp CTF  #Web  #PHP  #Deserialization  #PHP Deserialization  #SSTI  #XSS  #OOB 

Solution for DragonSector 2020 CTF’s ScratchPad challenge

2020-11-25
#CTF  #DragonSector CTF  #Web  #HTML  #XSLeak 

Solving InCTF’s GoSQLv3.

2020-08-02
#CTF  #SQL Injection  #SSRF  #Gopher  #MySQL 

Solving PortSwigger Lab: Developing a custom gadget chain for Java deserialization

2020-07-19
#CTF  #OSWE  #Java  #Deserialization  #Java Deserialization  #SQL Injection  #PostgreSQL 

Fwhibbit CTR (CTF): Solving Blind Hacker

2020-04-30
#Fwhibbit  #CTF  #Web  #PHP  #LooseComparison  #TypeJuggling  #RaceCondition  #Parse_URL 

Fwhibbit CTR (CTF): Solving Mike’s Dungeon

2020-04-22
#Fwhibbit  #CTF  #Web  #PHP  #LooseComparison  #TypeJuggling  #RaceCondition  #Parse_URL 

CybexCTF 2020 Writeup (Beep Boop, Potencial/Intensidad & Unsafe Behaviour)

2020-04-05
#CTF  #Cybex  #Stego  #Crypto  #python  #john  #deepsound 

LineCTF Your Notes solver

2020-03-20
#CTF  #LineCTF  #Web  #XSLeak 

NahamCon 2021 CTF’s AgentTester solver

2020-03-12
#CTF  #NahamCon CTF  #Web  #XSS  #Cache poisoning 

Hackplayers Conference 2020 Final CTF Writeup

2019-11-20
#h-con  #ctf  #web  #mongodb 

Hackplayers Conference 2020 Qualifiers CTF Writeup

2019-11-19
#h-con  #ctf  #stego  #crypto  #radio  #forensics  #boot2root 

[HackTheBox – Lame] (OSCP Like) English Writeup

2019-11-19
#HackTheBox  #English  #Writeup  #OSCP Practice  #nmap  #searchsploit  #nc  #smb  #python  #distcc  #udev  #kexploit 

[HackTheBox – Traverxec] Spanish Writeup

2019-11-18
#Spanish  #Español  #HackTheBox  #Writeup  #nostromo  #python  #john  #journalctl 

[HackTheBox – Networked] Spanish Writeup

2019-09-10
#Spanish  #Español  #Writeup  #php  #magic bytes  #msf  #bash 

[HackTheBox – Heist] Spanish Writeup

2019-09-08
#HackTheBox  #Spanish  #Español  #Writeup  #cisco  #enum4linux  #msf  #procdump