CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.
Whats Your Name: XSS, CSRF and SQLi chain
Insecure Deserialisation: PHP Object Injection to RCE
LDAP Injection: Auth Bypass to Blind Exfiltration
Server-side Template Injection: SSTI to RCE
Injectics: SQLi Filter Bypass to Twig RCE
ORM Injection: whereRaw and ORDER BY Injection
XXE Injection: File Read, SSRF, and Exfiltration
NoSQL Injection: MongoDB Operator and Syntax
Advanced SQL Injection: Five Evasion Techniques
