- formatting
- images
- links
- math
- code
- blockquotes
- external-services
•
•
•
•
•
•
-
Hookery — Faking a Login by Reusing a Public Key
How a shared key between webhook verification and login sessions enabled a JWT algorithm confusion attack to forge admin access.
-
Road
Road writeup
-
Pico Walkthrough
PicoCTF
-
Pandora
Pandora writeup
-
Note
A Note writeup