Blog

Posts

infosec 21 Aug 2025

Hacking Flappy Bird: How to Manipulate Scores Without Playing

Vulnerability analysis in the popular online Flappy Bird game that allows score manipulation through direct HTTP requests, completely byp...

Web Security API Vulnerability Score Manipulation
infosec 21 Aug 2025

Hacking T-Rex Runner on trex-runner.com: Understanding and Bypassing Anti-Cheat Systems

Complete guide to manipulating the T-Rex Runner game on trex-runner.com using JavaScript, including how to set specific scores, bypass an...

JavaScript Hacking T-Rex Game Browser Exploitation
infosec 21 Aug 2025

Vulnerabilities in Government Services: XSS and IDOR in Digital Platforms

Analysis of multiple security vulnerabilities found in government digital platforms, including reflected XSS and IDOR exposing private ci...

XSS IDOR Web Security
infosec 20 Aug 2025

Teslamate Exposed: When Your Tesla Data Is Out in the Open

Analysis of how misconfigured Teslamate installations are exposing sensitive data from thousands of Tesla vehicles on the internet, inclu...

Tesla Teslamate Privacy
review 13 Feb 2025

Analysis of a Vulnerability in H6Web, Hacking Holy Week - My First CVEs

Discovery and analysis of two critical vulnerabilities (IDOR and XSS) in H6Web, resulting in my first assigned CVEs.

Pentesting Web IDOR Insecure Direct Object Reference
review 04 Sep 2024

Vulnerabilidad XSS Reflejada Encontrada en el Sitio Web de la Agencia Tributaria

Informe de Vulnerabilidad XSS en la Web de la Agencia Tributaria

Pentesting Web Reflected XSS
review 04 Jul 2024

Review[EN] - eCPPTv3

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows
infosec 23 Apr 2024

Builder HTB - WriteUp

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins
infosec 26 Mar 2023

GoodGames HTB - WriteUp

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup
infosec 17 Mar 2023

Teacher HTB - WriteUp

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup