2026-02-19
Gmail Plus Addressing
Most people use Gmail daily — almost nobody uses this built-in security feature that materially improves breach attribution and personal OPSEC.
Security Research
Writeups & Research
CTF walkthroughs, penetration testing techniques, and hands-on offensive security research.
Latest
2025-11-29
Breached
Identifying a hidden admin email through metadata leakage from an auxiliary API, then deriving the flag via HMAC-SHA256.
2026-02-16
Love at first breach - TryHeartMe
Exploiting insecure JWT validation to escalate privileges and purchase a hidden flag item in an e-shop CTF challenge.
2026-02-14
THM - Valenfind Write-up
Exploiting path traversal in a dating app to read the app source and extract the admin API key.
> No writeups found matching “”
Get notified of new writeups
Subscribe