Writeups

An OSWE-style source code review of the tudo web app, ending in a single all-in-one exploit script.

Server-side template injection in ERPNext 12 leading to RCE.

Abusing PHP loose comparison in ATutor’s password reset flow to take over an arbitrary account.

Hack The Box: Clicker, from NFS share to root.

Building a ROP chain for Sync Breeze that does not depend on hardcoded addresses, so it survives across Windows versions.