Home

Ask why. Learn how.

Bug hunting & Pentesting. (CAPE | CPTS | CWES)

Advanced Web

DNS Rebinding
Web LLM Attacks
XSLT Injection
gRPC Exploitation
Web Cache Poisoning

AD Attacks

ADCS ESC1 Abuse
Cross-Forest Trust Abuse
Shadow Credentials
DPAPI Secrets Extraction
NTLM Relay Attacks

Bug Bounty

Session Puzzling
CORS Misconfigurations
API Attack Surface
Execution After Redirect
JWT Exploitation

Exploitation

Havoc SSRF → RCE Chain
Snap Package Privilege Escalation
DNSAdmins Exploitation
Git RCE via Git Clone
XPath Data Exfiltration
HTB Breach

Hack the Box Medium - Breach

Breach is a medium difficulty Windows machine focussing on Active Directory

Read more
HTB Scepter

Hack the Box Hard - Scepter

Scepter is a hard difficulty Windows machine focussing on Active Directory

Read more
Havoc SSRF RCE

Havoc SSRF chained RCE

Chaining SSRF using websockets to get remote code execution.

Read more