Write-ups
How I solved it
Full reasoning, not solve logs. If a dead end taught me something, it stays in — that is where the learning actually is.
2 entries
4 minmedium
From a blind SQL injection to a shell, one bit at a time
Personal lab
A lab walkthrough: finding a boolean-blind injection with no visible output, turning it into data exfiltration, then into file write, then into code execution.
- Write-ups
- Web Security
- SQL Injection
3 mineasy
The JWT that trusted its own header
Personal lab
A lab write-up on an authentication bypass through JWT algorithm confusion — the classic 'alg: none' and its slightly less obvious RS256-to-HS256 cousin.
- Write-ups
- Web Security
- Authentication
- CTF