Use a Server-Side Prototype Pollution to get an admin account on a Socket.IO chat server. Writeup of the Ariane Chat challenge of the BreizhCTF 2023.
Exfiltrate the note from the bot using an XS-Leaks technique called 'Cross-Origin Redirects and CSP Violations'
Write up of the challenge 'Unserial killer' of the DG'hAck 2022 which involves finding a PHP serialization gadget chain inside PHP libraries.
Technical analysis of the MoqHao (a.k.a RoamingMantis) Android malware and phishing campaign
Writeup of the machine Escalate-Me made by Root-Me for the EC2 CTF
