- formatting
- images
- links
- math
- code
- blockquotes
- external-services
•
•
•
•
•
•
-
File Upload Validation Bypass: From Reconnaissance to Privilege Escalation
A structured walkthrough of an authorized Vulnversity lab assessment, focusing on upload validation, evidence collection, and post-compromise privilege enumeration.
-
Statica — Bypassing AI Assistant Secret Masking
How asking an AI assistant to return a secret in a different format completely bypassed a regex-based masking filter.
-
Ashwick
How a local file inclusion vulnerability combined with Apache access log poisoning achieved remote code execution on the Township of Ashwick challenge.
-
Snobble AI
Snobble AI
-
Ohmly — Reading Secret Files Through the Datasheet Download
How an unsanitized filename parameter in a PDF download endpoint enabled path traversal to read arbitrary server files including the flag.