Filtered View
Tag: #rce
7 posts
UnEarthly Shop: MongoDB Aggregation to PHP Object Injection
An HTB Cyber Apocalypse 2023 write-up chaining MongoDB $lookup, mass assignment, and autoloader abuse to reach a Monolog deserialization gadget and execute /readflag.
Filtered Reality
Full-chain CTF writeup for a WordPress and Puppeteer bot challenge involving nonce leakage, DOM clobbering, CSP nonce recovery, RCE, and SHA-256 length extension.
Fancy
Status: Done
hqlime
Status: Done