Posts

ProtoPirate is an open-source Flipper Zero app, built from a private firmware leak, that can emulate vehicle key fobs

10.0 severity vulnerability in React Server Components: what’s at risk, how it works and steps to patch your application

Reclaiming full control of my ThinkPad T440p by removing Intel Management Engine with Heads firmware

A major overhaul of my Next.js blog: replacing the CMS, enhancing the UI, and automating deployments with GitOps

Exploited SQLpad vulnerability, cracked user credentials from the shadow file, leveraged a headless Chrome debugging port to obtain root flag

XSS via WonderCMS vulnerability, cracked user password hash from database and used command injection to get root access

Obtained reverse shell via Chamilo vulnerability, found user credentials with LinPEAS and manipulated ACLs to gain root

Finding SSH credentials through SSRF and exploiting a vulnerability in GitPython to obtain root access