IKEA Bug Bounty: Microsoft Graph API Proxy Information Leakage Target: [REDACTED].net Severity: High (7.5) Weakness: Broken Access Control / Insecure Proxy Report ID: #[REDACTED] 1. Summary The a...

Hey there! This is a writeup of the “disthis” CTF challenge, a Reverse Engineering chall. Challenge Overview Name: disthis Category: Reverse Engineering Handout: output.pyc (10.7 MB) De...

Hey there! Challenge Overview Name: Utopia City Government Portal Difficulty: Easy Description: Utopia City has deployed a government portal for citizens to contact city officials and acce...

In-Depth Technical Analysis of the “Deen Buddy” Application and its Connection to Christian-Themed App “Haven” Hey there! This writeup provides a detailed breakdown of the “Deen Buddy” mobile appl...

Hey There! This is a writeup of the solution to the “This then what huh?” CTF challenge. The challenge presents a web-based puzzle where the goal is to navigate a cursor through a series of instru...

Hey there! This is a deep dive into the “AgeBarrier” CTF challenge from Abyss, a clever web security task that involved dissecting a “bleeding-edge” age verification system built on the Spring Boo...

Hey there! this is An analysis of the “Waffles” CTF challenge, a complex web security task that required bypassing a custom Web Application Firewall (WAF), learning how a piece of obfuscated JavaS...

Hey there! This is an analysis of the “Single Slice Of CakeNews” CTF challenge, a multi-stage web challenge that involved finding a XSS vulnerability, manipulating the behavior of automated bots, ...

Writeup for web/emojicrypt, Hacking Time and Randomization Vulnerability Overview web/emojicrypt Uses random.choice(NUMBERS) for _ in range(32) with the default seed. Normally, in python3, th...

Portrait Gallery XSS Vulnerability Writeup Vulnerability Overview The Portrait Gallery application contains a stored XSS vulnerability that allows attackers to steal the admin bot’s cookie contai...