Vulnerability anaylsis and PoC Development for CVE-2024-39930 Introduction Gogs is a lightweight and self-hosted Git service that’s simple to set up and ideal for organizations that prefer to keep...

Vulnerability anaylsis and PoC Development for CVE-2024-42471 Introduction Zip it, unzip it — and boom, you’ve got unintended file writes on your hands. In this post, we dive into a directory tra...

Vulnerability anaylsis and PoC Development for CVE-2024-12905 Introduction The tar-fs npm package is commonly used in JavaScript projects to pack and extract .tar archive files. However, a critica...

Binary Exploitation - Quack Quack Difficulty: Very Easy Overview: Basic file checks The challenge begins with a zip file that we download from the HTB website. Here’s a breakdown of its contents:...

How I Discovered Vulnerabilities in Simple Online Planning v1.53.00 Introduction Ever come across an old vulnerability and wonder, “What else could be lurking in there?” That’s exactly what happe...

Binary Exploitation - Bad Grades Difficulty: Easy Overview: This challenge presents a classic binary exploitation scenario centered on a buffer overflow vulnerability due to an out-of-bounds write...

CDNio - HackTheBox To be released soon

Etceterad - echoCTF Information Gathering And Enumeration Let’s us first start off by firing up nmap to discover open ports and running services on our target. mcsam@0x32:~/$ sudo nmap -vvv 10.0...

BattleCTF 2024 Hi there, i participated in the battleCTF2024 under the name sigsegv. Here are the challenges i solved: Misc Rules Upon joining the discord server and nagivating to the #announcem...

Syswatch - brCTF Information Gathering And Enumeration Let’s us first start off by firing up our network mapper (nmap) to discover open ports and running services on our target. nmap -sC -sV -oN ...