Penetration-testing

Published on
June 12, 2025
Gone Phishing - Email writeup
writeup social-engineering penetration-testing phishing-simulation email-phishing
Some interesting strategies that helped boost the success rate of an email phishing campaign
Published on
December 20, 2023
Intigriti challenge 1223 writeup
writeup regex penetration-testing bug-bounty ReDoS RCE CTF
Exposing the hidden flag via catastrophic backtracking in the regex expression
Published on
November 6, 2023
Intigriti challenge 1023 writeup
writeup xss penetration-testing bug-bounty LFI RFI CTF
Exposing the hidden flag via improper sanitization of HTML and Chrome developer protocol
Published on
September 28, 2023
Intigriti challenge 0923 writeup
writeup sqli penetration-testing bug-bounty CTF
Exposing the hidden flag via improper handling of query parameters and blacklisting