Filtered View
Tag: #web
4 posts
HTB SpyBug: WAV/JavaScript Polyglot
Investigating a RIFF/WAVE upload bypass and the MIME-type restriction that can still prevent script execution.
Web-to-Cloud Attack Chains
Phase 2 notes: chaining web vulnerabilities into AWS credential theft, secret discovery, and cloud resource compromise.
CTF ideas (strange techniques)
A rolling Notion list of unusual CTF exploitation ideas and edge-case techniques.
Arkark security blog
Personal research blog covering web and CTF exploitation writeups.