CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.
XXE Injection: File Read, SSRF, and Exfiltration
NoSQL Injection: MongoDB Operator and Syntax
Advanced SQL Injection: Five Evasion Techniques
Hammer: OTP Rate-Limit Bypass to JWT kid RCE
Operation Promotion: SQLi, Command Injection, sudo find
Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin
Disgruntled: Linux Forensics of an Insider Logic Bomb
Silent Monitor: SQLi, Command Injection, KeePass to Root
Domino: IDOR to Forged JWT to RCE to Root
