CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.
XSS: reflected, stored, and DOM-based scripting attacks
Include: from property injection to log poisoning RCE
Prototype Pollution: injecting properties through the chain
File Inclusion: from path traversal to code execution
SSRF: forging requests from the server side
Whats Your Name: XSS, CSRF and SQLi chain
Insecure Deserialisation: PHP Object Injection to RCE
LDAP Injection: Auth Bypass to Blind Exfiltration
Server-side Template Injection: SSTI to RCE
