Archives
- 01 Sep Blind SSRF via MCP OAuth Discovery — Redirect-Based Bypass of a Private-IP Guard
- 30 Aug HTB Nexus Writeup
- 09 Aug SSRF with Response Disclosure on a Secrets-Retrieval Gateway
- 09 Aug Bypassing SMS & CAPTCHA Registration Controls Through a Native Magento REST API
- 09 Aug Web Cache Deception Testing
- 25 Jul HTB Silentium Writeup
- 25 Jul HTB Reactor Writeup
- 20 Jul HTB Facts Writeup
- 17 Jul HTB DevHub Writeup
- 16 Jul HTB Connected Writeup
- 16 Jul Password Reset Vulnerability Testing