Write-ups
Latest Featured Write-up
Session Hijacking to Node.js Debugger RCE
Exploited a NoSQL injection and session hijacking vulnerability to access a staff console, then used EJS template injection and an exposed Node.js debugger to achieve remote code execution and recover user and root flags.
Vulnerability:Server-Side Template Injection (SSTI)
Platform:TryHackMe
Difficulty:Intermediate
Severity:Critical(9.0–10.0)
Tags:
Remote Code ExecutionNoSQL InjectionSession HijackingExposed Debug InterfacePrivilege Escalation
6 min read
Exposed Git Repository Source Code Disclosure
Vulnerability:Information Disclosure
Platform:TryHackMe
Difficulty:Beginner
Severity:High(7.0–8.9)
Tags:
Web Application SecurityWeb server configuration+1
6 min read
From Exposed Credentials to Remote Shell
Vulnerability:Insecure Deserialization
Platform:TryHackMe
Difficulty:Beginner
Severity:Critical(9.0–10.0)
Tags:
Remote Code ExecutionDefault Credentials
4 min read
Setting Up TryHackMe OpenVPN on Kali Linux
Vulnerability:Informational
Platform:TryHackMe
Difficulty:Informational
Severity:Informational(0.0)
Tags:
TryHackMeTroubleshooting
3 min read
Setting Up Cloudflare One Client with Cloudflare Zero Trust
Vulnerability:Informational
Platform:Personal Lab
Difficulty:Informational
Severity:Informational(0.0)
Tags:
VPN
8 min read
OWASP Juice Shop - Exploring Web Application Vulnerabilities
Vulnerability:Informational
Platform:Personal Lab
Difficulty:Informational
Severity:Informational(0.0)
Tags:
OWASP Top 10Web Application Security+2
8 min read
Open Redirect Vulnerability Assessment Report
Vulnerability:Open Redirect
Platform:Bug Bounty
Difficulty:Beginner
Severity:Low(0.1–3.9)
Tags:
OWASP Top 10Web Application Security+2
6 min read