PRiTi.EX·Oct 19Bookstore — Tryhackme writeupBookstore is a boot2root CTF machine that teaches a beginner penetration tester basic web enumeration and REST API Fuzzing with LFI to RCE.
Synthex·Sep 29Critical Security Alert: Unauthenticated LFI to RCE in Visual Composer (CVE-2026–12227)In the ever-evolving landscape of web application security, popular WordPress plugins remain a primary target for threat actors. If you…
InOSINT TeambyBash Overflow·Sep 25[Padelify] — Blind XSS to Moderator Account Takeover, WAF Bypass and LFI ChainHow a moderator review workflow became the entry point for full admin compromise.
Amatairasu·Sep 22Handle With Care — SkillBit CTF WriteupWhen a ZIP File Turns Out to Be PHP Code — Zay’s Zipper Repair
Natarajan C K·Aug 31📂 File Inclusion Vulnerability: How a Simple File Request Can Become a Serious Security ProblemImagine you walk into a hotel. 🏨
Abdelrahman Radwan·Jul 27Brew Bank Revenge — Official Writeup | EYCC CTFبِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
Abdelrahman Radwan·Jul 27Brew Bank Official Writeup | EYCC CTFبِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ