All Posts

Published on
June 12, 2025
Gone Phishing - Email writeup
writeup social-engineering penetration-testing phishing-simulation email-phishing
Some interesting strategies that helped boost the success rate of an email phishing campaign
Published on
July 14, 2024
Intigriti challenge 0724 writeup
writeup XSS CTF DOM-clobbering CSP
Reflected XSS via dom clobbering
Published on
May 14, 2024
Intigriti challenge 0524 writeup
writeup XSS CTF
Arbitrary JS execution through improperly implemented Excel formulas
Published on
March 26, 2024
Intigriti challenge 0324 writeup
writeup XSS prototype-poisoning CTF
Arbitrary JS execution via prototype poisoning and unicode surrogate pair characters.
Published on
February 22, 2024
Intigriti Valentines challenge 0224 writeup
writeup XSS bug-bounty CTF cookie-manipulation JWT
Achieving sensitive data leak via XSS