Solving “Auditor” challenge from FahemSec, where SSRF was achieved through Apache Content-Type/header injection to reach an internal Flask service and retrieve...
Solving three web challenges from IEEE Mansoura CTF Qualifications 2025, featuring exploitation techniques such as XSS, CSP bypass, admin bot abuse, and Bottle...
CSP bypassXSSBottle deserialization/RCE
@Agn4by // IEEE Mansoura 2025
Read →Solving three web challenges from ASC Cyber WarGames 2025 Qualifications, covering exploitation techniques such as IDOR, JWT forgery, SQL injection, race...
sql-injectionPhar Deserializationjwtrace condition
@Agn4by // ASC Cyber WarGames
Read →