Blog

  •

    [CTF] HTB Paperwork write-up walkthrough

    5.00 of 5 votes

    This is my write-up and walkthrough for the Paperwork (10.129.99.189) box user and root flags. Paperwork is a Linux machine. When commencing this engagement, Paperwork was listed in HTB (hackthebox) with an easy difficulty rating.   Walkthrough I ran this engagement from my own Kali box, so the first job was getting onto the lab network. From the HackTheBox dashboard I downloaded the

  •

    [CTF] HTB Nexus write-up walkthrough

    4.50 of 14 votes

    This is my write-up and walkthrough for the Nexus (10.129.99.5) box user and root flags. Nexus is a Linux machine centred on web enumeration and a foothold that leads into a multi-step privilege-escalation chain. When commencing this engagement, Nexus was listed in HTB (hackthebox) with an easy difficulty rating.   Walkthrough I ran this engagement from my own Kali machine, so the first job

  • FEATURED

    Write-up of a reMarkable security vulnerability

    4.93 of 422 votes

    This is a write-up on an integer overflow vulnerability that enabled me to zero balance any order at reMarkable. I was looking to buy a reMarkable tablet as a gift to my boss (for putting up with me) and noticed they had a VDP. Unfortunately, they don’t offer bug bounty rewards, but curious about their ecommerce setup, I figured I’d

  • Write-up of a simple Activision security vulnerability

    4.67 of 146 votes

    This will be a short write-up as this one took no more than two minutes to identify from start to finish, and I actually found it laying in bed half asleep on my phone. Be warned, it's so simple it's underwhelming. The vulnerability is not device specific so this write-up will use desktop device screenshots for ease of reference.My friend

  • How I found a vulnerability giving me infinite CPE credits

    4.86 of 142 votes

    This is my write-up on a vulnerability I identified which allowed me to credit my ISACA CISM certification with unlimited CPE credits. During my day off I was looking at ways to earn myself some CPE credits towards my CISM certification. For context, 1 hour of eligible activities translates to the accrual of 1 CPE credit, and for my CISM certification,

  •

    CVE-2021-26084 PoC write-up

    4.81 of 103 votes

    This is my PoC write-up for CVE-2021-26084, which amounts to RCE and affects certain versions of Confluence Server and Data Center instances. I've come across this vulnerability a few times during the course of my research, so decided to add a brief PoC write-up for ease of future reference. Summary CVE-2021-26084 is an OGNL injection vulnerability allowing an unauthenticated attacker