01

WRITEUPS

Security research, CTF walkthroughs, and bug hunting adventures

LATEST WRITEUPS

3 posts
From Reflected XSS to Critical Bug Led to Sensitive Data Leakage

From Reflected XSS to Critical Bug Led to Sensitive Data Leakage

Chaining a reflected XSS with CORS misconfiguration to bypass origin restrictions and exfiltrate sensitive user data.

Security ResearchWebBug Hunting
Read
Dark Web Leakage Diarsis | A Journey into the Shadows

Dark Web Leakage Diarsis

Exploring dark web data leakage, threat intelligence gathering, and analysis of underground cybercriminal operations.

Security ResearchThreat Intelligence
Read
React2Shell | CVE-2025-55182

React2Shell

A deep dive into CVE-2025-55182, a critical RCE vulnerability found in React server-side rendering implementations.

Security ResearchWeb
Read

MORE WRITEUPS

5 posts
ZinadIT Cyber champions CTF | Reverse Engineering
CTF08/02/26

ZinadIT Cyber champions CTF

Complete reverse engineering walkthrough of the Zinad Cyber Champions CTF challenge, from binary analysis to flag extraction.

$XXX Privilege Escalation Vulnerability Led me to be Application admin
Bug Hunting05/02/26

$XXX Privilege Escalation Vulnerability Led me to be Application admin

A bug bounty story detailing how a privilege escalation vulnerability allowed full application admin access.

HTB Season 10 | Facts Writeup
HackTheBox26/01/26

HTB Season 10

Official writeup for the Facts machine from HackTheBox Season 10, covering web exploitation and Linux privilege escalation.

CVE-2025-24071, File Explorer vulnerability expose the NTLM Hashes
Security Research17/12/25

CVE-2025-24071, File Explorer vulnerability expose the NTLM Hashes

Analysis of CVE-2025-24071, a Windows File Explorer vulnerability that exposes NTLM hashes via crafted .library-ms files.

Introduction to Android App Hacking
Mobile24/08/25

Introduction to Android App Hacking

A comprehensive guide to Android application security testing, from setting up the environment to exploiting common vulnerabilities.