CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.
LDAP Injection: Auth Bypass to Blind Exfiltration
Server-side Template Injection: SSTI to RCE
Injectics: SQLi Filter Bypass to Twig RCE
ORM Injection: whereRaw and ORDER BY Injection
XXE Injection: File Read, SSRF, and Exfiltration
NoSQL Injection: MongoDB Operator and Syntax
Advanced SQL Injection: Five Evasion Techniques
Hammer: OTP Rate-Limit Bypass to JWT kid RCE
Operation Promotion: SQLi, Command Injection, sudo find
