infosec
Stored XSS Vulnerability in MCP HTML Deployment Service: Technical Analysis
Detailed technical analysis of critical stored XSS vulnerability discovered using MCPwn in MCP deployment service. Includes step-by-step ...
XSS Filter Bypass in Educational Web Application: SVG-Based Techniques
Analysis of a successful XSS filter bypass in an educational web application using SVG elements with event handlers, demonstrating limita...
Firebase Exposed: When Insecure Configurations Compromise Educational Platforms
Analysis of critical vulnerabilities in Firebase configurations that allow user data manipulation, personal information exposure, and una...
Hacking Flappy Bird: How to Manipulate Scores Without Playing
Vulnerability analysis in the popular online Flappy Bird game that allows score manipulation through direct HTTP requests, completely byp...
Hacking T-Rex Runner on trex-runner.com: Understanding and Bypassing Anti-Cheat Systems
Complete guide to manipulating the T-Rex Runner game on trex-runner.com using JavaScript, including how to set specific scores, bypass an...
Vulnerabilities in Government Services: XSS and IDOR in Digital Platforms
Analysis of multiple security vulnerabilities found in government digital platforms, including reflected XSS and IDOR exposing private ci...
Teslamate Exposed: When Your Tesla Data Is Out in the Open
Analysis of how misconfigured Teslamate installations are exposing sensitive data from thousands of Tesla vehicles on the internet, inclu...
Builder HTB - WriteUp
WriteUp de la máquina Builder de HTB.
GoodGames HTB - WriteUp
WriteUp de la máquina GoodGames de HTB.
Teacher HTB - WriteUp
WriteUp de la máquina Teacher de HTB.